./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 798a7b37 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 --- Real Ultimate output --- This is Ultimate 0.3.0-?-798a7b3-m [2025-03-04 16:09:00,213 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-04 16:09:00,274 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-04 16:09:00,280 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-04 16:09:00,280 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-04 16:09:00,281 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-04 16:09:00,294 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-04 16:09:00,295 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-04 16:09:00,296 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-04 16:09:00,296 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-04 16:09:00,297 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-04 16:09:00,297 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-04 16:09:00,297 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-04 16:09:00,297 INFO L153 SettingsManager]: * Use SBE=true [2025-03-04 16:09:00,298 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-04 16:09:00,298 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-04 16:09:00,298 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-04 16:09:00,299 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-04 16:09:00,300 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-04 16:09:00,300 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-04 16:09:00,300 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-04 16:09:00,300 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 [2025-03-04 16:09:00,519 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-04 16:09:00,531 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-04 16:09:00,533 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-04 16:09:00,534 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-04 16:09:00,534 INFO L274 PluginConnector]: CDTParser initialized [2025-03-04 16:09:00,536 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2025-03-04 16:09:01,651 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5dff49ed/31a0462d185b4b0eae5889992f71cd9d/FLAGe9434492c [2025-03-04 16:09:02,045 INFO L384 CDTParser]: Found 1 translation units. [2025-03-04 16:09:02,045 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2025-03-04 16:09:02,067 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5dff49ed/31a0462d185b4b0eae5889992f71cd9d/FLAGe9434492c [2025-03-04 16:09:02,299 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/f5dff49ed/31a0462d185b4b0eae5889992f71cd9d [2025-03-04 16:09:02,302 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-04 16:09:02,304 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-04 16:09:02,305 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-04 16:09:02,305 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-04 16:09:02,309 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-04 16:09:02,309 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:02,310 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@5b2f0276 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02, skipping insertion in model container [2025-03-04 16:09:02,310 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:02,348 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-04 16:09:02,653 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-04 16:09:02,665 INFO L200 MainTranslator]: Completed pre-run [2025-03-04 16:09:02,671 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [48] [2025-03-04 16:09:02,672 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [414] [2025-03-04 16:09:02,672 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [514] [2025-03-04 16:09:02,672 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [704] [2025-03-04 16:09:02,672 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1371] [2025-03-04 16:09:02,672 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [1389] [2025-03-04 16:09:02,673 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [1427] [2025-03-04 16:09:02,673 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1436] [2025-03-04 16:09:02,673 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [2938] [2025-03-04 16:09:02,674 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [3057] [2025-03-04 16:09:02,754 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-04 16:09:02,777 INFO L204 MainTranslator]: Completed translation [2025-03-04 16:09:02,778 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02 WrapperNode [2025-03-04 16:09:02,778 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-04 16:09:02,779 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-04 16:09:02,779 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-04 16:09:02,779 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-04 16:09:02,783 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:02,796 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:02,989 INFO L138 Inliner]: procedures = 90, calls = 343, calls flagged for inlining = 196, calls inlined = 638, statements flattened = 20689 [2025-03-04 16:09:02,989 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-04 16:09:02,990 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-04 16:09:02,990 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-04 16:09:02,990 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-04 16:09:02,996 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:02,996 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,020 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,076 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-04 16:09:03,076 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,076 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,201 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,218 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,237 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,255 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,292 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-04 16:09:03,292 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-04 16:09:03,292 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-04 16:09:03,293 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-04 16:09:03,293 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (1/1) ... [2025-03-04 16:09:03,297 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:03,305 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:03,318 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:03,321 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-04 16:09:03,340 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-04 16:09:03,341 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-04 16:09:03,342 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-04 16:09:03,342 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-04 16:09:03,492 INFO L256 CfgBuilder]: Building ICFG [2025-03-04 16:09:03,494 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-04 16:09:10,311 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,312 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-25: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-27: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-29: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-31: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-33: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-35: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-37: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-39: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-41: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-43: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-45: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-47: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-49: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-51: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,313 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-53: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-55: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-57: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1057-59: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~4#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-9: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-11: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-13: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-15: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-17: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,314 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-19: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-21: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-23: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-25: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-27: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-29: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-31: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-33: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-35: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-37: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1641-39: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-1: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-3: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,315 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-5: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-7: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-9: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-11: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-13: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-15: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-17: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2178-19: stopRequestedInDirection__wrappee__base_#res#1 := stopRequestedInDirection__wrappee__base_~retValue_acc~16#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-9: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-11: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-13: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-15: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-17: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2207-19: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,316 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-9: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-11: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-13: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-15: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-17: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-19: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-21: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-23: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-25: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-27: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-29: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-31: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-33: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-35: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-37: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-39: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-41: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-43: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-45: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-47: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-49: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-51: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-53: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-55: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-57: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-59: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-61: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-63: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-65: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,317 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-67: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-69: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-71: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-73: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-75: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-77: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-79: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-81: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,318 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-83: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-85: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-87: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-89: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-91: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-93: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-95: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-97: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-99: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-101: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-103: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-105: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-107: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-109: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,319 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-111: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-113: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-115: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-117: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1684-119: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-1: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-3: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-5: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,320 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-7: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-9: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-11: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-13: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-15: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-17: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-19: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-21: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-23: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-25: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-27: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1693-29: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-1: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-3: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-5: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-7: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-9: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-11: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-13: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-15: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-17: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2297-19: stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2328-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2328-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2328-5: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2328-7: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-04 16:09:10,321 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2328-9: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1813-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-9: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-11: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-13: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-15: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-17: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2342-19: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3402-1: main_#res#1 := main_~retValue_acc~29#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1826-1: isIdle_#res#1 := isIdle_~retValue_acc~15#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-1: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-3: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-5: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-7: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-9: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-11: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,322 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-13: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-15: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-17: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-19: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-21: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-23: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-25: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-27: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,324 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L2926-29: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,325 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,326 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,327 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,328 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,329 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,330 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-255: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-257: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L821-259: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-37: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-39: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-41: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-43: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-45: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-47: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1368-49: isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1424-1: valid_product_#res#1 := valid_product_~retValue_acc~7#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3015-1: getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; [2025-03-04 16:09:10,331 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3015-3: getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-1: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-3: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-5: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-7: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-9: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-11: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-13: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-15: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,332 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-17: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,333 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-19: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,333 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-21: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,333 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-23: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,333 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-25: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,333 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-27: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-29: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-31: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-33: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-35: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-37: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-39: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-41: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-43: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-45: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-47: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-49: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-51: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,334 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-53: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,335 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-55: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-57: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-59: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-61: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-63: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-65: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-67: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-69: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-71: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-73: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-75: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-77: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-79: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-81: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-83: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-85: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-87: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-89: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-91: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-93: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-95: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-97: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-99: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-101: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-103: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-105: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-107: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-109: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-111: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-113: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-115: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,336 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-117: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,337 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L3054-119: getDestination_#res#1 := getDestination_~retValue_acc~27#1; [2025-03-04 16:09:10,337 INFO L1325 $ProcedureCfgBuilder]: dead code at ProgramPoint L1512-1: isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; [2025-03-04 16:09:11,360 INFO L? ?]: Removed 9730 outVars from TransFormulas that were not future-live. [2025-03-04 16:09:11,361 INFO L307 CfgBuilder]: Performing block encoding [2025-03-04 16:09:11,432 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-04 16:09:11,432 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-04 16:09:11,432 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 04.03 04:09:11 BoogieIcfgContainer [2025-03-04 16:09:11,433 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-04 16:09:11,433 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-04 16:09:11,434 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-04 16:09:11,439 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-04 16:09:11,440 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-04 16:09:11,440 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 04.03 04:09:02" (1/3) ... [2025-03-04 16:09:11,441 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1dd77ada and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 04.03 04:09:11, skipping insertion in model container [2025-03-04 16:09:11,441 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-04 16:09:11,441 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 04.03 04:09:02" (2/3) ... [2025-03-04 16:09:11,441 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1dd77ada and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 04.03 04:09:11, skipping insertion in model container [2025-03-04 16:09:11,442 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-04 16:09:11,442 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 04.03 04:09:11" (3/3) ... [2025-03-04 16:09:11,443 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product03.cil.c [2025-03-04 16:09:11,546 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-04 16:09:11,546 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-04 16:09:11,546 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-04 16:09:11,546 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-04 16:09:11,546 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-04 16:09:11,547 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-04 16:09:11,547 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-04 16:09:11,547 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-04 16:09:11,569 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5962 states, 5961 states have (on average 1.8726723704076498) internal successors, (11163), 5961 states have internal predecessors, (11163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:11,683 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1207 [2025-03-04 16:09:11,684 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:11,684 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:11,701 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:11,702 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:11,702 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-04 16:09:11,713 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5962 states, 5961 states have (on average 1.8726723704076498) internal successors, (11163), 5961 states have internal predecessors, (11163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:11,765 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1207 [2025-03-04 16:09:11,766 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:11,766 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:11,769 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:11,771 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:11,778 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:11,783 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:11,786 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:11,787 INFO L85 PathProgramCache]: Analyzing trace with hash 1891750452, now seen corresponding path program 1 times [2025-03-04 16:09:11,793 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:11,793 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1863832469] [2025-03-04 16:09:11,793 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:11,794 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:11,881 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 164 statements into 1 equivalence classes. [2025-03-04 16:09:11,941 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 164 of 164 statements. [2025-03-04 16:09:11,945 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:11,945 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:12,401 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:12,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:12,405 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1863832469] [2025-03-04 16:09:12,405 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1863832469] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:12,405 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:12,405 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:12,406 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [214614742] [2025-03-04 16:09:12,406 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:12,408 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:12,409 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:12,409 INFO L85 PathProgramCache]: Analyzing trace with hash 1476705974, now seen corresponding path program 1 times [2025-03-04 16:09:12,409 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:12,409 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [617191603] [2025-03-04 16:09:12,409 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:12,410 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:12,427 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-04 16:09:12,437 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-04 16:09:12,438 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:12,438 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:12,505 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:12,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:12,505 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [617191603] [2025-03-04 16:09:12,505 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [617191603] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:12,505 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:12,505 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-04 16:09:12,506 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1715133475] [2025-03-04 16:09:12,506 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:12,506 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:12,507 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:12,524 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-04 16:09:12,524 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-04 16:09:12,537 INFO L87 Difference]: Start difference. First operand has 5962 states, 5961 states have (on average 1.8726723704076498) internal successors, (11163), 5961 states have internal predecessors, (11163), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 5 states, 5 states have (on average 9.0) internal successors, (45), 5 states have internal predecessors, (45), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:13,464 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:13,465 INFO L93 Difference]: Finished difference Result 11371 states and 21289 transitions. [2025-03-04 16:09:13,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 11371 states and 21289 transitions. [2025-03-04 16:09:13,542 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2312 [2025-03-04 16:09:13,623 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 11371 states to 11337 states and 21250 transitions. [2025-03-04 16:09:13,624 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 11337 [2025-03-04 16:09:13,642 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 11337 [2025-03-04 16:09:13,643 INFO L73 IsDeterministic]: Start isDeterministic. Operand 11337 states and 21250 transitions. [2025-03-04 16:09:13,672 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-04 16:09:13,672 INFO L218 hiAutomatonCegarLoop]: Abstraction has 11337 states and 21250 transitions. [2025-03-04 16:09:13,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 11337 states and 21250 transitions. [2025-03-04 16:09:13,967 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 11337 to 11327. [2025-03-04 16:09:13,992 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 11327 states, 11327 states have (on average 1.8747241105323562) internal successors, (21235), 11326 states have internal predecessors, (21235), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:14,022 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 11327 states to 11327 states and 21235 transitions. [2025-03-04 16:09:14,023 INFO L240 hiAutomatonCegarLoop]: Abstraction has 11327 states and 21235 transitions. [2025-03-04 16:09:14,024 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-04 16:09:14,027 INFO L432 stractBuchiCegarLoop]: Abstraction has 11327 states and 21235 transitions. [2025-03-04 16:09:14,027 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-04 16:09:14,027 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 11327 states and 21235 transitions. [2025-03-04 16:09:14,065 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2310 [2025-03-04 16:09:14,066 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:14,066 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:14,070 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:14,070 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:14,071 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:14,072 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:14,072 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:14,073 INFO L85 PathProgramCache]: Analyzing trace with hash -370732080, now seen corresponding path program 1 times [2025-03-04 16:09:14,073 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:14,073 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905026815] [2025-03-04 16:09:14,073 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:14,073 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:14,098 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 164 statements into 1 equivalence classes. [2025-03-04 16:09:14,104 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 164 of 164 statements. [2025-03-04 16:09:14,104 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:14,104 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:14,342 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:14,343 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:14,343 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905026815] [2025-03-04 16:09:14,344 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905026815] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:14,344 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:14,344 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:14,344 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [994381582] [2025-03-04 16:09:14,344 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:14,344 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:14,345 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:14,345 INFO L85 PathProgramCache]: Analyzing trace with hash -1903944813, now seen corresponding path program 1 times [2025-03-04 16:09:14,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:14,345 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2116059601] [2025-03-04 16:09:14,345 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:14,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:14,369 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-04 16:09:14,376 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-04 16:09:14,376 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:14,376 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:14,404 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:14,404 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:14,404 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2116059601] [2025-03-04 16:09:14,404 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2116059601] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:14,404 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:14,404 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:14,404 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [465779296] [2025-03-04 16:09:14,404 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:14,405 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:14,405 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:14,405 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 16:09:14,406 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 16:09:14,406 INFO L87 Difference]: Start difference. First operand 11327 states and 21235 transitions. cyclomatic complexity: 9909 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:14,692 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:14,692 INFO L93 Difference]: Finished difference Result 16902 states and 31647 transitions. [2025-03-04 16:09:14,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16902 states and 31647 transitions. [2025-03-04 16:09:14,788 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3481 [2025-03-04 16:09:14,877 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16902 states to 16902 states and 31647 transitions. [2025-03-04 16:09:14,877 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16902 [2025-03-04 16:09:14,898 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16902 [2025-03-04 16:09:14,899 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16902 states and 31647 transitions. [2025-03-04 16:09:14,928 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-04 16:09:14,928 INFO L218 hiAutomatonCegarLoop]: Abstraction has 16902 states and 31647 transitions. [2025-03-04 16:09:14,948 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16902 states and 31647 transitions. [2025-03-04 16:09:15,200 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16902 to 16682. [2025-03-04 16:09:15,224 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 16682 states, 16682 states have (on average 1.8741757583023617) internal successors, (31265), 16681 states have internal predecessors, (31265), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:15,264 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 16682 states to 16682 states and 31265 transitions. [2025-03-04 16:09:15,264 INFO L240 hiAutomatonCegarLoop]: Abstraction has 16682 states and 31265 transitions. [2025-03-04 16:09:15,267 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 16:09:15,268 INFO L432 stractBuchiCegarLoop]: Abstraction has 16682 states and 31265 transitions. [2025-03-04 16:09:15,268 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-04 16:09:15,268 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 16682 states and 31265 transitions. [2025-03-04 16:09:15,334 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3381 [2025-03-04 16:09:15,335 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:15,335 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:15,342 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:15,343 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:15,343 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:15,344 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:15,344 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:15,345 INFO L85 PathProgramCache]: Analyzing trace with hash -370732080, now seen corresponding path program 2 times [2025-03-04 16:09:15,345 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:15,345 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [374984464] [2025-03-04 16:09:15,345 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-04 16:09:15,345 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:15,376 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 164 statements into 1 equivalence classes. [2025-03-04 16:09:15,383 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 164 of 164 statements. [2025-03-04 16:09:15,383 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-04 16:09:15,383 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:15,579 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:15,579 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:15,579 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [374984464] [2025-03-04 16:09:15,579 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [374984464] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:15,579 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:15,579 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:15,579 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1170047613] [2025-03-04 16:09:15,579 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:15,580 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:15,580 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:15,580 INFO L85 PathProgramCache]: Analyzing trace with hash -138283891, now seen corresponding path program 1 times [2025-03-04 16:09:15,580 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:15,580 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [318651033] [2025-03-04 16:09:15,580 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:15,580 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:15,590 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 47 statements into 1 equivalence classes. [2025-03-04 16:09:15,600 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 47 of 47 statements. [2025-03-04 16:09:15,600 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:15,601 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:15,873 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:15,874 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:15,874 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [318651033] [2025-03-04 16:09:15,874 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [318651033] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:15,874 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:15,874 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [13] imperfect sequences [] total 13 [2025-03-04 16:09:15,874 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [54668440] [2025-03-04 16:09:15,874 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:15,874 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:15,874 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:15,874 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 13 interpolants. [2025-03-04 16:09:15,874 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=27, Invalid=129, Unknown=0, NotChecked=0, Total=156 [2025-03-04 16:09:15,874 INFO L87 Difference]: Start difference. First operand 16682 states and 31265 transitions. cyclomatic complexity: 14584 Second operand has 13 states, 13 states have (on average 3.6153846153846154) internal successors, (47), 13 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:22,159 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:22,159 INFO L93 Difference]: Finished difference Result 26595 states and 49370 transitions. [2025-03-04 16:09:22,159 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 26595 states and 49370 transitions. [2025-03-04 16:09:22,246 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5424 [2025-03-04 16:09:22,334 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 26595 states to 26595 states and 49370 transitions. [2025-03-04 16:09:22,334 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 26595 [2025-03-04 16:09:22,359 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 26595 [2025-03-04 16:09:22,360 INFO L73 IsDeterministic]: Start isDeterministic. Operand 26595 states and 49370 transitions. [2025-03-04 16:09:22,386 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-04 16:09:22,386 INFO L218 hiAutomatonCegarLoop]: Abstraction has 26595 states and 49370 transitions. [2025-03-04 16:09:22,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 26595 states and 49370 transitions. [2025-03-04 16:09:22,666 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 26595 to 26570. [2025-03-04 16:09:22,704 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 26570 states, 26570 states have (on average 1.8567933759879562) internal successors, (49335), 26569 states have internal predecessors, (49335), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:22,755 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26570 states to 26570 states and 49335 transitions. [2025-03-04 16:09:22,755 INFO L240 hiAutomatonCegarLoop]: Abstraction has 26570 states and 49335 transitions. [2025-03-04 16:09:22,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2025-03-04 16:09:22,758 INFO L432 stractBuchiCegarLoop]: Abstraction has 26570 states and 49335 transitions. [2025-03-04 16:09:22,758 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-04 16:09:22,758 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26570 states and 49335 transitions. [2025-03-04 16:09:22,823 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5419 [2025-03-04 16:09:22,824 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:22,824 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:22,829 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:22,829 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:22,830 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:22,830 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume 0 != continueInDirection_~tmp~11#1;~currentHeading~0 := 0;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:22,831 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:22,831 INFO L85 PathProgramCache]: Analyzing trace with hash -370732080, now seen corresponding path program 3 times [2025-03-04 16:09:22,831 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:22,832 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2093809500] [2025-03-04 16:09:22,832 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-04 16:09:22,832 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:23,004 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 164 statements into 1 equivalence classes. [2025-03-04 16:09:23,009 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 164 of 164 statements. [2025-03-04 16:09:23,009 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-04 16:09:23,009 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:23,139 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:23,139 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:23,139 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2093809500] [2025-03-04 16:09:23,139 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2093809500] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:23,139 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:23,139 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:23,139 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [475602158] [2025-03-04 16:09:23,139 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:23,140 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:23,141 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:23,141 INFO L85 PathProgramCache]: Analyzing trace with hash -382261516, now seen corresponding path program 1 times [2025-03-04 16:09:23,141 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:23,141 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [871270775] [2025-03-04 16:09:23,141 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:23,141 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:23,153 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-04 16:09:23,157 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-04 16:09:23,157 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:23,157 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:23,225 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:23,226 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:23,226 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [871270775] [2025-03-04 16:09:23,226 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [871270775] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:23,226 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:23,226 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-04 16:09:23,226 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [676212127] [2025-03-04 16:09:23,226 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:23,226 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:23,226 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:23,227 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-04 16:09:23,227 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-04 16:09:23,227 INFO L87 Difference]: Start difference. First operand 26570 states and 49335 transitions. cyclomatic complexity: 22766 Second operand has 7 states, 7 states have (on average 6.857142857142857) internal successors, (48), 7 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:25,435 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:25,435 INFO L93 Difference]: Finished difference Result 21614 states and 39936 transitions. [2025-03-04 16:09:25,435 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21614 states and 39936 transitions. [2025-03-04 16:09:25,533 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4397 [2025-03-04 16:09:25,607 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21614 states to 21614 states and 39936 transitions. [2025-03-04 16:09:25,608 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21614 [2025-03-04 16:09:25,639 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21614 [2025-03-04 16:09:25,640 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21614 states and 39936 transitions. [2025-03-04 16:09:25,662 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-04 16:09:25,662 INFO L218 hiAutomatonCegarLoop]: Abstraction has 21614 states and 39936 transitions. [2025-03-04 16:09:25,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21614 states and 39936 transitions. [2025-03-04 16:09:25,901 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21614 to 21614. [2025-03-04 16:09:25,931 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 21614 states, 21614 states have (on average 1.8476913111871935) internal successors, (39936), 21613 states have internal predecessors, (39936), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:25,966 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21614 states to 21614 states and 39936 transitions. [2025-03-04 16:09:25,966 INFO L240 hiAutomatonCegarLoop]: Abstraction has 21614 states and 39936 transitions. [2025-03-04 16:09:25,968 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-04 16:09:25,969 INFO L432 stractBuchiCegarLoop]: Abstraction has 21614 states and 39936 transitions. [2025-03-04 16:09:25,969 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-04 16:09:25,969 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21614 states and 39936 transitions. [2025-03-04 16:09:26,017 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4397 [2025-03-04 16:09:26,018 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:26,018 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:26,022 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:26,022 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:26,022 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:26,023 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume 0 != continueInDirection_~tmp~11#1;~currentHeading~0 := 0;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:26,023 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:26,024 INFO L85 PathProgramCache]: Analyzing trace with hash 412878828, now seen corresponding path program 1 times [2025-03-04 16:09:26,024 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:26,024 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1152241002] [2025-03-04 16:09:26,024 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:26,024 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:26,046 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 172 statements into 1 equivalence classes. [2025-03-04 16:09:26,050 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 172 of 172 statements. [2025-03-04 16:09:26,051 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:26,051 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:26,148 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:26,148 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:26,148 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1152241002] [2025-03-04 16:09:26,148 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1152241002] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:26,148 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:26,149 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:26,149 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2096588589] [2025-03-04 16:09:26,149 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:26,149 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:26,149 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:26,149 INFO L85 PathProgramCache]: Analyzing trace with hash 391239969, now seen corresponding path program 1 times [2025-03-04 16:09:26,149 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:26,149 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1337737456] [2025-03-04 16:09:26,150 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:26,150 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:26,159 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 49 statements into 1 equivalence classes. [2025-03-04 16:09:26,161 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 49 of 49 statements. [2025-03-04 16:09:26,162 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:26,162 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:26,195 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:26,196 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:26,196 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1337737456] [2025-03-04 16:09:26,196 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1337737456] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:26,196 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:26,196 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-04 16:09:26,196 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977321089] [2025-03-04 16:09:26,196 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:26,196 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:26,196 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:26,196 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-04 16:09:26,197 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-04 16:09:26,197 INFO L87 Difference]: Start difference. First operand 21614 states and 39936 transitions. cyclomatic complexity: 18323 Second operand has 5 states, 5 states have (on average 9.8) internal successors, (49), 5 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:26,683 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:26,684 INFO L93 Difference]: Finished difference Result 34214 states and 63184 transitions. [2025-03-04 16:09:26,684 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34214 states and 63184 transitions. [2025-03-04 16:09:26,802 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7592 [2025-03-04 16:09:26,897 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34214 states to 34184 states and 63154 transitions. [2025-03-04 16:09:26,897 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34184 [2025-03-04 16:09:26,926 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34184 [2025-03-04 16:09:26,926 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34184 states and 63154 transitions. [2025-03-04 16:09:26,955 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-04 16:09:26,955 INFO L218 hiAutomatonCegarLoop]: Abstraction has 34184 states and 63154 transitions. [2025-03-04 16:09:26,979 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34184 states and 63154 transitions. [2025-03-04 16:09:27,236 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34184 to 34078. [2025-03-04 16:09:27,280 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 34078 states, 34078 states have (on average 1.8481131521802923) internal successors, (62980), 34077 states have internal predecessors, (62980), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:27,332 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34078 states to 34078 states and 62980 transitions. [2025-03-04 16:09:27,332 INFO L240 hiAutomatonCegarLoop]: Abstraction has 34078 states and 62980 transitions. [2025-03-04 16:09:27,336 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-04 16:09:27,337 INFO L432 stractBuchiCegarLoop]: Abstraction has 34078 states and 62980 transitions. [2025-03-04 16:09:27,337 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-04 16:09:27,337 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34078 states and 62980 transitions. [2025-03-04 16:09:27,425 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7570 [2025-03-04 16:09:27,425 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:27,426 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:27,430 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:27,431 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:27,431 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" [2025-03-04 16:09:27,432 INFO L754 eck$LassoCheckResult]: Loop: "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~6#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1;" "assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6#1);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" [2025-03-04 16:09:27,433 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:27,433 INFO L85 PathProgramCache]: Analyzing trace with hash 412878828, now seen corresponding path program 2 times [2025-03-04 16:09:27,433 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:27,433 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [891608164] [2025-03-04 16:09:27,433 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-04 16:09:27,433 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:27,457 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 172 statements into 1 equivalence classes. [2025-03-04 16:09:27,461 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 172 of 172 statements. [2025-03-04 16:09:27,462 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-04 16:09:27,462 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:27,560 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:27,560 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:27,561 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [891608164] [2025-03-04 16:09:27,561 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [891608164] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:27,561 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:27,561 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:27,561 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1257002503] [2025-03-04 16:09:27,561 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:27,561 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:27,561 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:27,562 INFO L85 PathProgramCache]: Analyzing trace with hash 167959012, now seen corresponding path program 1 times [2025-03-04 16:09:27,562 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:27,562 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1464752675] [2025-03-04 16:09:27,562 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:27,562 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:27,574 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-04 16:09:27,581 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-04 16:09:27,581 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:27,581 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 16:09:27,581 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-03-04 16:09:27,585 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-04 16:09:27,590 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-04 16:09:27,590 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:27,590 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 16:09:27,624 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2025-03-04 16:09:28,673 INFO L204 LassoAnalysis]: Preferences: [2025-03-04 16:09:28,674 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-04 16:09:28,674 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-04 16:09:28,674 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-04 16:09:28,674 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2025-03-04 16:09:28,675 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:28,675 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-04 16:09:28,675 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-04 16:09:28,675 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration6_Loop [2025-03-04 16:09:28,675 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-04 16:09:28,675 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-04 16:09:28,691 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,696 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,697 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,699 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,700 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,703 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,705 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,706 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,708 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,711 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,714 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,719 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,721 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,723 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,724 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,726 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,729 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,732 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,734 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,736 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,741 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,743 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,747 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,749 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,750 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,752 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,754 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,756 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,757 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,759 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,761 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,762 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,766 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,767 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,769 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,772 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,774 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,776 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,777 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,779 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,780 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,782 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,784 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,786 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,788 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,789 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,791 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,792 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,794 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,796 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,798 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,799 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,802 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,803 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,805 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,807 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,809 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,810 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,812 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,813 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,814 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,816 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,818 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,819 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,824 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,826 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,827 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,828 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,830 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,831 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,834 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,835 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,837 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,838 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,840 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,842 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,844 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,845 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,847 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,848 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,850 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,851 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,853 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,855 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,856 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,858 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,860 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,862 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,863 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,865 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,866 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,867 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,869 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,870 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,874 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,876 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,879 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,881 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,882 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,884 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,886 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,887 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,890 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,893 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,895 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,896 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,897 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,899 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,901 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,902 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,904 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,905 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,907 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,908 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,910 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,911 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,913 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,914 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,916 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,917 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,919 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,921 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,923 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,924 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,926 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,928 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,929 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,931 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:28,934 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,230 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-04 16:09:29,230 INFO L365 LassoAnalysis]: Checking for nontermination... [2025-03-04 16:09:29,231 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,232 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,235 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,236 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2025-03-04 16:09:29,238 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,238 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,254 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,254 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,260 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2025-03-04 16:09:29,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,261 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,262 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,264 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2025-03-04 16:09:29,266 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,266 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,277 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,277 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,285 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,285 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,285 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,287 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,289 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2025-03-04 16:09:29,290 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,290 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,304 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,304 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=0} Honda state: {ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,311 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,312 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,314 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,315 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2025-03-04 16:09:29,317 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,317 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,328 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,328 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,334 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,334 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,334 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,336 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,337 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2025-03-04 16:09:29,339 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,339 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,351 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,351 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,357 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,357 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,357 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,359 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,361 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2025-03-04 16:09:29,364 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,364 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,374 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,375 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,381 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,381 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,381 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,384 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,385 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2025-03-04 16:09:29,386 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,386 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,398 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,398 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,403 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2025-03-04 16:09:29,403 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,403 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,405 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,406 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2025-03-04 16:09:29,408 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,408 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,422 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,422 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,427 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,428 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,428 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,429 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,430 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2025-03-04 16:09:29,432 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,432 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,443 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,443 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~executiveFloor~0=1} Honda state: {~executiveFloor~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,448 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,449 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,449 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,451 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,452 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2025-03-04 16:09:29,453 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,453 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,463 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,464 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isTopFloor_#in~floorID#1=0} Honda state: {ULTIMATE.start_isTopFloor_#in~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,469 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,469 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,470 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,472 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,473 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2025-03-04 16:09:29,474 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,474 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,484 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,484 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,491 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,492 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,493 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2025-03-04 16:09:29,494 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,494 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,504 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,504 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectFloorCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,509 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Ended with exit code 0 [2025-03-04 16:09:29,509 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,509 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,511 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,512 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2025-03-04 16:09:29,512 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,512 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,522 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,523 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,528 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2025-03-04 16:09:29,529 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,529 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,530 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,532 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2025-03-04 16:09:29,533 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,533 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,544 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,545 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,550 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,550 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,550 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,554 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,555 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2025-03-04 16:09:29,557 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,557 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,568 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,569 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~10#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,574 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,574 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,576 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,578 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2025-03-04 16:09:29,578 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,579 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,589 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,589 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,594 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,594 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,594 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,596 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,597 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2025-03-04 16:09:29,599 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,599 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,609 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,609 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,614 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,614 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,615 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,616 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,617 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2025-03-04 16:09:29,620 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,620 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,630 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,631 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=1} Honda state: {~expectedDirection~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,636 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,636 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,636 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,638 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,639 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2025-03-04 16:09:29,641 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,641 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,653 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:29,653 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:29,659 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,659 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,659 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,661 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,662 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2025-03-04 16:09:29,663 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:29,663 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,681 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,682 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,682 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:29,683 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:29,685 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2025-03-04 16:09:29,686 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2025-03-04 16:09:29,686 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:29,706 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2025-03-04 16:09:29,710 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:29,710 INFO L204 LassoAnalysis]: Preferences: [2025-03-04 16:09:29,710 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-04 16:09:29,710 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-04 16:09:29,710 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-04 16:09:29,710 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2025-03-04 16:09:29,710 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:29,710 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-04 16:09:29,710 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-04 16:09:29,710 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration6_Loop [2025-03-04 16:09:29,710 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-04 16:09:29,710 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-04 16:09:29,717 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,722 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,724 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,725 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,728 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,729 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,730 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,732 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,733 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,735 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,736 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,738 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,740 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,741 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,742 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,744 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,745 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,746 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,750 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,752 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,756 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,757 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,759 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,760 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,761 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,763 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,764 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,765 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,767 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,768 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,769 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,771 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,773 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,774 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,775 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,777 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,778 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,779 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,781 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,782 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,783 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,785 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,786 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,788 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,789 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,790 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,792 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,793 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,794 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,796 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,797 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,799 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,800 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,802 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,803 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,804 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,806 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,807 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,809 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,810 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,811 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,813 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,814 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,817 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,822 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,824 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,825 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,826 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,828 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,829 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,830 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,832 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,834 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,835 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,837 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,838 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,839 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,841 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,842 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,843 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,845 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,846 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,847 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,849 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,850 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,851 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,853 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,855 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,856 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,857 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,859 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,860 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,861 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,863 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,864 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,867 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,869 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,870 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,871 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,873 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,874 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,876 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,877 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,880 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,881 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,883 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,884 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,886 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,887 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,888 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,890 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,891 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,893 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,894 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,896 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,897 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,899 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,901 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,902 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,903 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,905 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,906 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,908 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,909 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,910 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,912 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,914 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,923 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:29,926 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:30,194 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-04 16:09:30,201 INFO L451 LassoAnalysis]: Using template 'affine'. [2025-03-04 16:09:30,205 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,206 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,207 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,208 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2025-03-04 16:09:30,211 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,222 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,223 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,223 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,223 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,223 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,227 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,227 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,230 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,235 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,236 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,236 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,238 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,239 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2025-03-04 16:09:30,240 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,250 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,250 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,250 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,250 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,250 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,251 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,251 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,252 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,257 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,257 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,257 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,259 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,260 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2025-03-04 16:09:30,261 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,271 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,271 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,271 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,271 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,271 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,271 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,271 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,272 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,277 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2025-03-04 16:09:30,278 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,278 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,280 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,280 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2025-03-04 16:09:30,281 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,291 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,291 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,291 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,291 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,291 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,291 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,291 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,292 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,297 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Ended with exit code 0 [2025-03-04 16:09:30,298 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,298 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,300 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,301 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2025-03-04 16:09:30,302 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,312 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,312 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,312 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,312 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,312 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,313 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,313 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,314 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,319 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,319 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,319 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,321 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,321 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2025-03-04 16:09:30,322 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,332 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,332 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,332 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,332 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,332 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,332 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,332 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,333 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,338 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2025-03-04 16:09:30,338 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,338 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,340 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,341 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2025-03-04 16:09:30,342 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,352 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,352 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,352 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,352 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,352 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,353 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,353 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,354 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,359 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,359 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,359 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,361 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,361 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2025-03-04 16:09:30,364 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,373 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,373 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,374 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,374 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,374 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,374 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,374 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,375 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,380 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,380 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,380 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,382 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,383 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2025-03-04 16:09:30,383 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,393 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,393 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,393 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,393 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,393 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,393 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,393 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,394 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,399 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2025-03-04 16:09:30,399 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,399 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,401 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,402 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2025-03-04 16:09:30,403 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,412 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,412 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,412 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,412 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,412 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,412 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,412 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,413 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,418 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2025-03-04 16:09:30,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,419 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,420 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,421 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2025-03-04 16:09:30,422 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,431 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,432 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,432 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,432 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,432 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,432 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,432 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,433 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,438 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,439 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,439 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,440 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,441 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2025-03-04 16:09:30,442 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,451 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,452 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,452 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,452 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,452 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,452 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,452 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,453 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,458 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2025-03-04 16:09:30,458 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,458 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,460 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,460 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2025-03-04 16:09:30,462 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,471 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,471 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,471 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,471 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,471 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,471 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,471 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,472 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,478 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2025-03-04 16:09:30,478 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,478 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,480 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,480 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2025-03-04 16:09:30,481 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,490 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,490 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,491 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,491 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,491 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,491 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,491 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,492 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,496 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,497 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,497 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,498 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,499 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2025-03-04 16:09:30,500 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,509 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,509 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,509 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,509 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,509 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,509 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,509 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,510 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,515 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2025-03-04 16:09:30,515 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,515 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,517 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,576 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2025-03-04 16:09:30,576 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,586 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,587 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,587 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,587 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,587 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,587 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,587 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,588 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,594 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2025-03-04 16:09:30,594 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,594 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,596 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,596 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2025-03-04 16:09:30,598 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,608 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,608 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,608 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,608 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,608 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,609 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,609 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,610 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:30,615 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,615 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,616 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,617 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,618 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2025-03-04 16:09:30,620 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:30,629 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:30,630 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:30,630 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:30,630 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:30,630 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:30,632 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:30,632 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:30,633 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2025-03-04 16:09:30,642 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2025-03-04 16:09:30,644 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2025-03-04 16:09:30,645 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:30,645 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:30,648 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:30,649 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2025-03-04 16:09:30,650 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2025-03-04 16:09:30,650 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2025-03-04 16:09:30,650 INFO L474 LassoAnalysis]: Proved termination. [2025-03-04 16:09:30,650 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = -1*~currentFloorID~0 Supporting invariants [] [2025-03-04 16:09:30,656 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:30,658 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2025-03-04 16:09:30,689 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:30,848 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 172 statements into 1 equivalence classes. [2025-03-04 16:09:30,991 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 172 of 172 statements. [2025-03-04 16:09:30,992 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:30,992 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:30,997 INFO L256 TraceCheckSpWp]: Trace formula consists of 1124 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-03-04 16:09:31,002 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-04 16:09:31,204 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 50 statements into 1 equivalence classes. [2025-03-04 16:09:31,220 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 50 of 50 statements. [2025-03-04 16:09:31,220 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:31,220 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:31,221 INFO L256 TraceCheckSpWp]: Trace formula consists of 197 conjuncts, 8 conjuncts are in the unsatisfiable core [2025-03-04 16:09:31,223 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-04 16:09:31,369 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:31,373 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2025-03-04 16:09:31,374 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 34078 states and 62980 transitions. cyclomatic complexity: 28903 Second operand has 7 states, 7 states have (on average 31.714285714285715) internal successors, (222), 7 states have internal predecessors, (222), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:32,571 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 34078 states and 62980 transitions. cyclomatic complexity: 28903. Second operand has 7 states, 7 states have (on average 31.714285714285715) internal successors, (222), 7 states have internal predecessors, (222), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 68381 states and 126068 transitions. Complement of second has 16 states. [2025-03-04 16:09:32,573 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 6 non-accepting loop states 1 accepting loop states [2025-03-04 16:09:32,575 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 31.714285714285715) internal successors, (222), 7 states have internal predecessors, (222), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:32,588 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 15143 transitions. [2025-03-04 16:09:32,592 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15143 transitions. Stem has 172 letters. Loop has 50 letters. [2025-03-04 16:09:32,596 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:32,596 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15143 transitions. Stem has 222 letters. Loop has 50 letters. [2025-03-04 16:09:32,597 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:32,597 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15143 transitions. Stem has 172 letters. Loop has 100 letters. [2025-03-04 16:09:32,598 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:32,598 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 68381 states and 126068 transitions. [2025-03-04 16:09:32,870 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19012 [2025-03-04 16:09:33,071 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 68381 states to 60761 states and 111848 transitions. [2025-03-04 16:09:33,071 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47419 [2025-03-04 16:09:33,114 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47427 [2025-03-04 16:09:33,115 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60761 states and 111848 transitions. [2025-03-04 16:09:33,117 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:33,117 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60761 states and 111848 transitions. [2025-03-04 16:09:33,363 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Ended with exit code 0 [2025-03-04 16:09:33,382 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60761 states and 111848 transitions. [2025-03-04 16:09:33,918 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60761 to 60571. [2025-03-04 16:09:33,965 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60571 states, 60571 states have (on average 1.8419210513281934) internal successors, (111567), 60570 states have internal predecessors, (111567), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:34,070 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60571 states to 60571 states and 111567 transitions. [2025-03-04 16:09:34,071 INFO L240 hiAutomatonCegarLoop]: Abstraction has 60571 states and 111567 transitions. [2025-03-04 16:09:34,071 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:34,072 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-04 16:09:34,072 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-04 16:09:34,072 INFO L87 Difference]: Start difference. First operand 60571 states and 111567 transitions. Second operand has 4 states, 4 states have (on average 43.0) internal successors, (172), 4 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:34,543 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:34,543 INFO L93 Difference]: Finished difference Result 60613 states and 111609 transitions. [2025-03-04 16:09:34,543 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60613 states and 111609 transitions. [2025-03-04 16:09:34,820 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19007 [2025-03-04 16:09:35,032 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60613 states to 60613 states and 111609 transitions. [2025-03-04 16:09:35,032 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47434 [2025-03-04 16:09:35,083 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47434 [2025-03-04 16:09:35,084 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60613 states and 111609 transitions. [2025-03-04 16:09:35,087 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:35,087 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60613 states and 111609 transitions. [2025-03-04 16:09:35,135 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60613 states and 111609 transitions. [2025-03-04 16:09:36,108 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60613 to 60607. [2025-03-04 16:09:36,158 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60607 states, 60607 states have (on average 1.8414209579751515) internal successors, (111603), 60606 states have internal predecessors, (111603), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:36,247 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60607 states to 60607 states and 111603 transitions. [2025-03-04 16:09:36,248 INFO L240 hiAutomatonCegarLoop]: Abstraction has 60607 states and 111603 transitions. [2025-03-04 16:09:36,249 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-04 16:09:36,249 INFO L432 stractBuchiCegarLoop]: Abstraction has 60607 states and 111603 transitions. [2025-03-04 16:09:36,249 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-04 16:09:36,249 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60607 states and 111603 transitions. [2025-03-04 16:09:36,380 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19007 [2025-03-04 16:09:36,381 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:36,381 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:36,384 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:36,384 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:36,384 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" [2025-03-04 16:09:36,385 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~6#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1;" "assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6#1);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" [2025-03-04 16:09:36,385 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:36,385 INFO L85 PathProgramCache]: Analyzing trace with hash 946717281, now seen corresponding path program 1 times [2025-03-04 16:09:36,385 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:36,385 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [785990438] [2025-03-04 16:09:36,385 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:36,385 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:36,408 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 175 statements into 1 equivalence classes. [2025-03-04 16:09:36,412 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 175 of 175 statements. [2025-03-04 16:09:36,413 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:36,413 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:36,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:36,474 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:36,474 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [785990438] [2025-03-04 16:09:36,474 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [785990438] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:36,474 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:36,474 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:36,475 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [426238607] [2025-03-04 16:09:36,475 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:36,475 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:36,475 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:36,475 INFO L85 PathProgramCache]: Analyzing trace with hash -1805567102, now seen corresponding path program 1 times [2025-03-04 16:09:36,475 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:36,475 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1350597628] [2025-03-04 16:09:36,475 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:36,475 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:36,486 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 51 statements into 1 equivalence classes. [2025-03-04 16:09:36,487 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 51 of 51 statements. [2025-03-04 16:09:36,487 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:36,488 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:36,532 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:36,535 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:36,536 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1350597628] [2025-03-04 16:09:36,536 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1350597628] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:36,536 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:36,536 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:36,536 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [691067517] [2025-03-04 16:09:36,536 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:36,536 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:36,536 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:36,536 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 16:09:36,536 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 16:09:36,537 INFO L87 Difference]: Start difference. First operand 60607 states and 111603 transitions. cyclomatic complexity: 51011 Second operand has 3 states, 3 states have (on average 17.0) internal successors, (51), 3 states have internal predecessors, (51), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:37,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:37,466 INFO L93 Difference]: Finished difference Result 60607 states and 111507 transitions. [2025-03-04 16:09:37,466 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60607 states and 111507 transitions. [2025-03-04 16:09:37,647 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19007 [2025-03-04 16:09:37,801 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60607 states to 60607 states and 111507 transitions. [2025-03-04 16:09:37,801 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 47428 [2025-03-04 16:09:37,837 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 47428 [2025-03-04 16:09:37,838 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60607 states and 111507 transitions. [2025-03-04 16:09:37,877 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:37,878 INFO L218 hiAutomatonCegarLoop]: Abstraction has 60607 states and 111507 transitions. [2025-03-04 16:09:37,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60607 states and 111507 transitions. [2025-03-04 16:09:38,528 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60607 to 60607. [2025-03-04 16:09:38,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 60607 states, 60607 states have (on average 1.8398369825267709) internal successors, (111507), 60606 states have internal predecessors, (111507), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:38,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60607 states to 60607 states and 111507 transitions. [2025-03-04 16:09:38,857 INFO L240 hiAutomatonCegarLoop]: Abstraction has 60607 states and 111507 transitions. [2025-03-04 16:09:38,858 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 16:09:38,858 INFO L432 stractBuchiCegarLoop]: Abstraction has 60607 states and 111507 transitions. [2025-03-04 16:09:38,858 INFO L338 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2025-03-04 16:09:38,858 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60607 states and 111507 transitions. [2025-03-04 16:09:38,959 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 19007 [2025-03-04 16:09:38,959 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:38,959 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:38,961 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:38,961 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:38,961 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" [2025-03-04 16:09:38,962 INFO L754 eck$LassoCheckResult]: Loop: "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 1;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret36#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___3~0#1 := __utac_acc__Specification3_spec__1_#t~ret36#1;havoc __utac_acc__Specification3_spec__1_#t~ret36#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~6#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1;" "assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6#1);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" [2025-03-04 16:09:38,963 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:38,963 INFO L85 PathProgramCache]: Analyzing trace with hash 946717281, now seen corresponding path program 2 times [2025-03-04 16:09:38,963 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:38,963 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699109908] [2025-03-04 16:09:38,963 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-04 16:09:38,963 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:38,987 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 175 statements into 1 equivalence classes. [2025-03-04 16:09:38,995 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 175 of 175 statements. [2025-03-04 16:09:38,995 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-04 16:09:38,995 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:39,042 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:39,043 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:39,043 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699109908] [2025-03-04 16:09:39,043 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699109908] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:39,043 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:39,043 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:39,043 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1468800731] [2025-03-04 16:09:39,043 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:39,043 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:39,044 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:39,044 INFO L85 PathProgramCache]: Analyzing trace with hash -2110216988, now seen corresponding path program 1 times [2025-03-04 16:09:39,045 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:39,045 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [667138831] [2025-03-04 16:09:39,045 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:39,045 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:39,058 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-04 16:09:39,062 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-04 16:09:39,065 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:39,065 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 16:09:39,065 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-03-04 16:09:39,068 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-04 16:09:39,071 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-04 16:09:39,071 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:39,072 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-04 16:09:39,080 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2025-03-04 16:09:39,902 INFO L204 LassoAnalysis]: Preferences: [2025-03-04 16:09:39,902 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-04 16:09:39,902 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-04 16:09:39,902 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-04 16:09:39,902 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2025-03-04 16:09:39,902 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:39,902 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-04 16:09:39,902 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-04 16:09:39,902 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration8_Loop [2025-03-04 16:09:39,902 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-04 16:09:39,902 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-04 16:09:39,904 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,906 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,908 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,909 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,910 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,911 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,912 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,914 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,915 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,916 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,917 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,919 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,920 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,921 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,922 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,924 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,925 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,927 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,928 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,929 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,931 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,932 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,934 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,935 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,937 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,938 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,939 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,941 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,942 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,944 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,945 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,946 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,947 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,948 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,950 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,951 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,952 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,953 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,955 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,956 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,957 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,958 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,960 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,961 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,962 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,964 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,965 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,968 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,970 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,971 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,973 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,974 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,975 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,976 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,978 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,979 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,981 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,982 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,984 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,985 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,987 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,988 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,991 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,993 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,994 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,995 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,997 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,998 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:39,999 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,000 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,002 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,004 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,005 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,006 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,008 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,011 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,012 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,014 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,015 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,016 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,017 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,021 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,022 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,024 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,025 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,026 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,027 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,029 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,030 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,031 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,032 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,034 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,035 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,036 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,040 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,041 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,042 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,044 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,045 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,046 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,048 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,049 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,050 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,052 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,053 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,055 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,056 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,058 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,059 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,060 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,062 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,063 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,064 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,066 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,067 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,068 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,070 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,071 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,072 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,074 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,075 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,076 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,078 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,080 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,081 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,084 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,086 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,089 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,093 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:40,352 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-04 16:09:40,355 INFO L365 LassoAnalysis]: Checking for nontermination... [2025-03-04 16:09:40,356 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,356 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,358 INFO L229 MonitoredProcess]: Starting monitored process 42 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,360 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2025-03-04 16:09:40,361 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,361 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,372 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,373 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,378 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2025-03-04 16:09:40,379 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,379 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,380 INFO L229 MonitoredProcess]: Starting monitored process 43 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,381 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2025-03-04 16:09:40,383 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,383 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,395 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,395 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isTopFloor_#in~floorID#1=0} Honda state: {ULTIMATE.start_isTopFloor_#in~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,401 ERROR L418 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Exception during sending of exit command (exit): Broken pipe [2025-03-04 16:09:40,401 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,401 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,401 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,403 INFO L229 MonitoredProcess]: Starting monitored process 44 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,405 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2025-03-04 16:09:40,407 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,407 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,418 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,418 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_~retValue_acc~23#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,423 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,423 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,423 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,425 INFO L229 MonitoredProcess]: Starting monitored process 45 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,426 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2025-03-04 16:09:40,427 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,427 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,437 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,437 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_getCurrentHeading_#res#1=0} Honda state: {ULTIMATE.start_getCurrentHeading_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,443 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,443 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,443 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,444 INFO L229 MonitoredProcess]: Starting monitored process 46 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,445 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2025-03-04 16:09:40,447 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,447 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,458 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,458 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~retValue_acc~14#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~retValue_acc~14#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,463 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,464 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,464 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,465 INFO L229 MonitoredProcess]: Starting monitored process 47 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,466 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2025-03-04 16:09:40,467 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,467 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,477 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,477 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,483 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Ended with exit code 0 [2025-03-04 16:09:40,483 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,484 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,485 INFO L229 MonitoredProcess]: Starting monitored process 48 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,486 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2025-03-04 16:09:40,487 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,487 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,498 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,498 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~4#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~4#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,503 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2025-03-04 16:09:40,503 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,504 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,505 INFO L229 MonitoredProcess]: Starting monitored process 49 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,507 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Waiting until timeout for monitored process [2025-03-04 16:09:40,509 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,509 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,519 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,520 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,525 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Ended with exit code 0 [2025-03-04 16:09:40,525 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,525 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,527 INFO L229 MonitoredProcess]: Starting monitored process 50 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,528 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Waiting until timeout for monitored process [2025-03-04 16:09:40,528 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,528 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,539 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,539 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,544 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Ended with exit code 0 [2025-03-04 16:09:40,545 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,545 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,546 INFO L229 MonitoredProcess]: Starting monitored process 51 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,548 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Waiting until timeout for monitored process [2025-03-04 16:09:40,548 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,548 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,558 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,559 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,564 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Ended with exit code 0 [2025-03-04 16:09:40,564 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,564 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,566 INFO L229 MonitoredProcess]: Starting monitored process 52 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,567 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Waiting until timeout for monitored process [2025-03-04 16:09:40,568 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,568 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,578 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,579 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,584 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Ended with exit code 0 [2025-03-04 16:09:40,584 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,584 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,586 INFO L229 MonitoredProcess]: Starting monitored process 53 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,586 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Waiting until timeout for monitored process [2025-03-04 16:09:40,587 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,587 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,598 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,598 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,603 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Ended with exit code 0 [2025-03-04 16:09:40,604 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,604 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,605 INFO L229 MonitoredProcess]: Starting monitored process 54 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,606 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Waiting until timeout for monitored process [2025-03-04 16:09:40,607 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,607 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,617 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,617 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectFloorCalls#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,623 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (54)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,623 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,623 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,625 INFO L229 MonitoredProcess]: Starting monitored process 55 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,626 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Waiting until timeout for monitored process [2025-03-04 16:09:40,626 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,626 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,637 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,637 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_getCurrentHeading_~retValue_acc~12#1=0} Honda state: {ULTIMATE.start_getCurrentHeading_~retValue_acc~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,642 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (55)] Ended with exit code 0 [2025-03-04 16:09:40,643 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,643 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,644 INFO L229 MonitoredProcess]: Starting monitored process 56 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,645 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Waiting until timeout for monitored process [2025-03-04 16:09:40,646 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,646 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,656 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,656 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~executiveFloor~0=1} Honda state: {~executiveFloor~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,663 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (56)] Ended with exit code 0 [2025-03-04 16:09:40,663 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,663 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,665 INFO L229 MonitoredProcess]: Starting monitored process 57 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,666 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Waiting until timeout for monitored process [2025-03-04 16:09:40,667 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,667 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,678 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,678 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret124#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret124#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,683 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (57)] Ended with exit code 0 [2025-03-04 16:09:40,684 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,684 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,685 INFO L229 MonitoredProcess]: Starting monitored process 58 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,686 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Waiting until timeout for monitored process [2025-03-04 16:09:40,687 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,687 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,697 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,697 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,702 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (58)] Ended with exit code 0 [2025-03-04 16:09:40,702 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,703 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,704 INFO L229 MonitoredProcess]: Starting monitored process 59 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,705 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Waiting until timeout for monitored process [2025-03-04 16:09:40,706 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,706 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,716 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,716 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,721 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (59)] Ended with exit code 0 [2025-03-04 16:09:40,721 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,722 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,723 INFO L229 MonitoredProcess]: Starting monitored process 60 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,724 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Waiting until timeout for monitored process [2025-03-04 16:09:40,725 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,725 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,735 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,735 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,740 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (60)] Ended with exit code 0 [2025-03-04 16:09:40,740 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,741 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,742 INFO L229 MonitoredProcess]: Starting monitored process 61 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,743 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Waiting until timeout for monitored process [2025-03-04 16:09:40,745 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,745 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,755 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,755 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=0} Honda state: {ULTIMATE.start_isFloorCalling_~retValue_acc~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,760 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (61)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,760 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,760 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,762 INFO L229 MonitoredProcess]: Starting monitored process 62 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,763 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Waiting until timeout for monitored process [2025-03-04 16:09:40,764 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,764 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,774 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,775 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,780 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (62)] Ended with exit code 0 [2025-03-04 16:09:40,780 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,781 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,782 INFO L229 MonitoredProcess]: Starting monitored process 63 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,814 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Waiting until timeout for monitored process [2025-03-04 16:09:40,814 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,814 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,825 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,825 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret68#1=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret68#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,830 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (63)] Ended with exit code 0 [2025-03-04 16:09:40,830 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,830 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,832 INFO L229 MonitoredProcess]: Starting monitored process 64 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,833 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Waiting until timeout for monitored process [2025-03-04 16:09:40,834 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,834 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,844 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,844 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,849 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (64)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,849 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,850 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,851 INFO L229 MonitoredProcess]: Starting monitored process 65 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,852 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Waiting until timeout for monitored process [2025-03-04 16:09:40,854 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,854 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,864 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,864 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~retValue_acc~15#1=0} Honda state: {ULTIMATE.start_isIdle_~retValue_acc~15#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,869 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (65)] Ended with exit code 0 [2025-03-04 16:09:40,870 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,870 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,871 INFO L229 MonitoredProcess]: Starting monitored process 66 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,872 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (66)] Waiting until timeout for monitored process [2025-03-04 16:09:40,873 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,873 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,883 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,884 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~dir#1=0} Honda state: {ULTIMATE.start_continueInDirection_~dir#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,889 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (66)] Ended with exit code 0 [2025-03-04 16:09:40,890 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,890 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,891 INFO L229 MonitoredProcess]: Starting monitored process 67 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,892 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (67)] Waiting until timeout for monitored process [2025-03-04 16:09:40,893 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,893 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,904 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,904 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,909 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (67)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:40,909 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,909 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,911 INFO L229 MonitoredProcess]: Starting monitored process 68 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,912 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (68)] Waiting until timeout for monitored process [2025-03-04 16:09:40,913 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,913 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,923 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,923 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret53#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret53#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,928 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (68)] Ended with exit code 0 [2025-03-04 16:09:40,929 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,929 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,930 INFO L229 MonitoredProcess]: Starting monitored process 69 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,931 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (69)] Waiting until timeout for monitored process [2025-03-04 16:09:40,932 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,932 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,942 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,942 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret39#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret39#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,948 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (69)] Ended with exit code 0 [2025-03-04 16:09:40,948 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,948 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,950 INFO L229 MonitoredProcess]: Starting monitored process 70 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,950 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (70)] Waiting until timeout for monitored process [2025-03-04 16:09:40,951 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,951 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,962 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,962 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret44#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret44#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,967 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (70)] Ended with exit code 0 [2025-03-04 16:09:40,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,968 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,969 INFO L229 MonitoredProcess]: Starting monitored process 71 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,970 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (71)] Waiting until timeout for monitored process [2025-03-04 16:09:40,971 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,971 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:40,981 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:40,981 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~dir#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~dir#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:40,986 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (71)] Ended with exit code 0 [2025-03-04 16:09:40,986 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:40,987 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:40,988 INFO L229 MonitoredProcess]: Starting monitored process 72 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:40,989 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (72)] Waiting until timeout for monitored process [2025-03-04 16:09:40,990 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:40,990 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,000 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,000 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret95#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret95#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,006 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (72)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,006 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,006 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,007 INFO L229 MonitoredProcess]: Starting monitored process 73 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,008 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (73)] Waiting until timeout for monitored process [2025-03-04 16:09:41,009 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,009 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,019 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,019 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#res#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,025 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (73)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,025 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,025 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,027 INFO L229 MonitoredProcess]: Starting monitored process 74 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,027 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (74)] Waiting until timeout for monitored process [2025-03-04 16:09:41,030 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,030 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,040 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,040 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_#res#1=0} Honda state: {ULTIMATE.start_isBlocked_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,045 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (74)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,046 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,046 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,047 INFO L229 MonitoredProcess]: Starting monitored process 75 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,048 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (75)] Waiting until timeout for monitored process [2025-03-04 16:09:41,049 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,049 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,060 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,060 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret33#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret33#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,065 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (75)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,065 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,065 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,067 INFO L229 MonitoredProcess]: Starting monitored process 76 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,068 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (76)] Waiting until timeout for monitored process [2025-03-04 16:09:41,069 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,069 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,079 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,079 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~currentFloorID___0~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~currentFloorID___0~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,084 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (76)] Ended with exit code 0 [2025-03-04 16:09:41,085 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,085 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,086 INFO L229 MonitoredProcess]: Starting monitored process 77 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,087 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (77)] Waiting until timeout for monitored process [2025-03-04 16:09:41,088 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,088 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,098 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,098 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret90#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret90#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,103 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (77)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,104 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,104 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,105 INFO L229 MonitoredProcess]: Starting monitored process 78 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,106 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (78)] Waiting until timeout for monitored process [2025-03-04 16:09:41,107 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,107 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,117 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,117 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret88#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,123 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (78)] Ended with exit code 0 [2025-03-04 16:09:41,123 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,123 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,124 INFO L229 MonitoredProcess]: Starting monitored process 79 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,125 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (79)] Waiting until timeout for monitored process [2025-03-04 16:09:41,126 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,126 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,137 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,137 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,142 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (79)] Ended with exit code 0 [2025-03-04 16:09:41,142 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,142 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,144 INFO L229 MonitoredProcess]: Starting monitored process 80 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,144 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (80)] Waiting until timeout for monitored process [2025-03-04 16:09:41,145 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,145 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,155 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,156 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isTopFloor_~floorID#1=0} Honda state: {ULTIMATE.start_isTopFloor_~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,161 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (80)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,161 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,161 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,163 INFO L229 MonitoredProcess]: Starting monitored process 81 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,163 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (81)] Waiting until timeout for monitored process [2025-03-04 16:09:41,164 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,164 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,174 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,174 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,179 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (81)] Ended with exit code 0 [2025-03-04 16:09:41,180 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,180 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,181 INFO L229 MonitoredProcess]: Starting monitored process 82 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,182 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (82)] Waiting until timeout for monitored process [2025-03-04 16:09:41,183 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,183 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,193 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,193 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,199 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (82)] Ended with exit code 0 [2025-03-04 16:09:41,199 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,199 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,201 INFO L229 MonitoredProcess]: Starting monitored process 83 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,201 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (83)] Waiting until timeout for monitored process [2025-03-04 16:09:41,203 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,203 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,213 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,213 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret50#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret50#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,220 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (83)] Ended with exit code 0 [2025-03-04 16:09:41,220 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,220 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,222 INFO L229 MonitoredProcess]: Starting monitored process 84 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,223 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (84)] Waiting until timeout for monitored process [2025-03-04 16:09:41,224 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,224 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,235 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,235 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret38#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret38#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,241 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (84)] Ended with exit code 0 [2025-03-04 16:09:41,241 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,241 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,243 INFO L229 MonitoredProcess]: Starting monitored process 85 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,243 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (85)] Waiting until timeout for monitored process [2025-03-04 16:09:41,244 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,244 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,255 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,255 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~17#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~retValue_acc~17#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,261 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (85)] Ended with exit code 0 [2025-03-04 16:09:41,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,261 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,263 INFO L229 MonitoredProcess]: Starting monitored process 86 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,264 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (86)] Waiting until timeout for monitored process [2025-03-04 16:09:41,265 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,265 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,276 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,276 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___2~1#1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___2~1#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,281 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (86)] Ended with exit code 0 [2025-03-04 16:09:41,281 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,282 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,283 INFO L229 MonitoredProcess]: Starting monitored process 87 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,284 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (87)] Waiting until timeout for monitored process [2025-03-04 16:09:41,285 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,285 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,295 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-04 16:09:41,295 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret67#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret67#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-04 16:09:41,301 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (87)] Ended with exit code 0 [2025-03-04 16:09:41,301 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,301 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,303 INFO L229 MonitoredProcess]: Starting monitored process 88 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,303 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (88)] Waiting until timeout for monitored process [2025-03-04 16:09:41,304 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-04 16:09:41,304 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,320 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (88)] Ended with exit code 0 [2025-03-04 16:09:41,320 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,320 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,322 INFO L229 MonitoredProcess]: Starting monitored process 89 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,322 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (89)] Waiting until timeout for monitored process [2025-03-04 16:09:41,323 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2025-03-04 16:09:41,323 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-04 16:09:41,334 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2025-03-04 16:09:41,340 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (89)] Ended with exit code 0 [2025-03-04 16:09:41,340 INFO L204 LassoAnalysis]: Preferences: [2025-03-04 16:09:41,340 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-04 16:09:41,340 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-04 16:09:41,340 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-04 16:09:41,340 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2025-03-04 16:09:41,340 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,340 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-04 16:09:41,340 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-04 16:09:41,340 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration8_Loop [2025-03-04 16:09:41,340 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-04 16:09:41,340 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-04 16:09:41,342 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,345 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,347 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,348 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,349 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,351 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,352 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,353 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,355 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,356 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,357 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,358 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,360 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,361 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,364 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,365 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,366 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,367 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,368 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,370 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,371 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,372 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,373 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,375 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,377 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,378 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,379 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,381 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,382 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,383 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,384 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,386 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,387 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,388 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,389 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,390 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,392 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,394 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,395 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,397 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,398 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,399 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,400 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,401 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,403 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,404 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,405 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,409 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,410 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,411 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,413 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,414 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,416 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,418 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,420 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,421 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,422 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,423 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,424 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,425 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,426 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,427 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,428 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,429 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,430 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,431 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,432 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,433 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,434 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,435 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,440 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,441 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,442 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,443 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,445 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,446 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,447 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,448 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,449 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,452 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,453 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,454 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,455 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,458 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,460 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,462 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,463 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,464 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,465 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,467 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,468 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,472 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,473 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,475 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,476 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,478 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,480 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,481 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,482 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,483 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,484 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,486 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,487 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,488 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,489 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,491 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,492 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,493 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,494 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,496 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,497 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,498 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,499 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,501 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,502 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,503 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,504 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,506 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,507 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,509 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,510 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,512 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,514 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,516 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,518 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,520 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,523 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,527 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,528 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-04 16:09:41,740 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-04 16:09:41,744 INFO L451 LassoAnalysis]: Using template 'affine'. [2025-03-04 16:09:41,745 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,745 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,747 INFO L229 MonitoredProcess]: Starting monitored process 90 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,748 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (90)] Waiting until timeout for monitored process [2025-03-04 16:09:41,751 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,761 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,761 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,761 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,761 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,762 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,762 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,762 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,763 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,768 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (90)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,769 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,769 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,770 INFO L229 MonitoredProcess]: Starting monitored process 91 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,771 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (91)] Waiting until timeout for monitored process [2025-03-04 16:09:41,772 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,782 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,782 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,782 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,782 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,782 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,782 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,782 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,783 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,788 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (91)] Ended with exit code 0 [2025-03-04 16:09:41,788 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,789 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,790 INFO L229 MonitoredProcess]: Starting monitored process 92 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,791 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (92)] Waiting until timeout for monitored process [2025-03-04 16:09:41,792 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,802 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,802 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,802 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,802 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,802 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,802 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,802 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,803 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,809 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (92)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,809 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,809 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,811 INFO L229 MonitoredProcess]: Starting monitored process 93 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,811 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (93)] Waiting until timeout for monitored process [2025-03-04 16:09:41,812 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,822 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,822 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,822 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,822 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,822 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,822 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,822 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,823 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,830 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (93)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,830 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,830 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,832 INFO L229 MonitoredProcess]: Starting monitored process 94 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,832 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (94)] Waiting until timeout for monitored process [2025-03-04 16:09:41,835 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,844 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,845 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,845 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,845 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,845 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,845 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,845 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,846 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,852 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (94)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,852 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,852 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,854 INFO L229 MonitoredProcess]: Starting monitored process 95 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,856 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (95)] Waiting until timeout for monitored process [2025-03-04 16:09:41,857 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,866 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,866 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,866 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,867 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,867 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,867 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,867 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,868 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,873 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (95)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:41,873 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,874 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,875 INFO L229 MonitoredProcess]: Starting monitored process 96 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,876 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (96)] Waiting until timeout for monitored process [2025-03-04 16:09:41,877 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,886 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,887 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,887 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,887 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,887 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,887 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,887 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,888 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,893 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (96)] Ended with exit code 0 [2025-03-04 16:09:41,894 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,894 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,895 INFO L229 MonitoredProcess]: Starting monitored process 97 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,896 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (97)] Waiting until timeout for monitored process [2025-03-04 16:09:41,897 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,906 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,907 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,907 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,907 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,907 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,907 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,907 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,908 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,913 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (97)] Ended with exit code 0 [2025-03-04 16:09:41,913 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,914 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,915 INFO L229 MonitoredProcess]: Starting monitored process 98 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,916 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (98)] Waiting until timeout for monitored process [2025-03-04 16:09:41,917 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,926 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,926 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,927 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,927 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,927 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,927 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,927 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,928 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,933 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (98)] Ended with exit code 0 [2025-03-04 16:09:41,933 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,933 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,935 INFO L229 MonitoredProcess]: Starting monitored process 99 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,936 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (99)] Waiting until timeout for monitored process [2025-03-04 16:09:41,938 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,948 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,948 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,948 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,948 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,948 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,948 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,948 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,949 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,954 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (99)] Ended with exit code 0 [2025-03-04 16:09:41,954 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,954 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,956 INFO L229 MonitoredProcess]: Starting monitored process 100 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,956 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (100)] Waiting until timeout for monitored process [2025-03-04 16:09:41,958 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,967 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,967 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,968 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,968 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,968 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,968 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,968 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,969 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,974 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (100)] Ended with exit code 0 [2025-03-04 16:09:41,974 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,974 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,976 INFO L229 MonitoredProcess]: Starting monitored process 101 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,976 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (101)] Waiting until timeout for monitored process [2025-03-04 16:09:41,978 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:41,987 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:41,987 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:41,987 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:41,987 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:41,987 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:41,988 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:41,988 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:41,989 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:41,994 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (101)] Ended with exit code 0 [2025-03-04 16:09:41,994 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:41,994 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:41,996 INFO L229 MonitoredProcess]: Starting monitored process 102 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:41,996 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (102)] Waiting until timeout for monitored process [2025-03-04 16:09:41,997 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,007 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,007 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,007 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,007 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,007 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,008 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,008 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,009 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,014 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (102)] Ended with exit code 0 [2025-03-04 16:09:42,014 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,014 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,016 INFO L229 MonitoredProcess]: Starting monitored process 103 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,017 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (103)] Waiting until timeout for monitored process [2025-03-04 16:09:42,018 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,027 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,027 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,027 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,027 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,027 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,028 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,028 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,029 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,034 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (103)] Ended with exit code 0 [2025-03-04 16:09:42,034 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,034 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,036 INFO L229 MonitoredProcess]: Starting monitored process 104 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,036 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (104)] Waiting until timeout for monitored process [2025-03-04 16:09:42,037 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,047 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,047 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,047 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,047 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,047 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,047 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,047 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,048 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,053 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (104)] Ended with exit code 0 [2025-03-04 16:09:42,054 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,054 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,055 INFO L229 MonitoredProcess]: Starting monitored process 105 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,056 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (105)] Waiting until timeout for monitored process [2025-03-04 16:09:42,057 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,066 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,066 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,067 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,067 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,067 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,067 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,067 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,068 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,073 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (105)] Ended with exit code 0 [2025-03-04 16:09:42,073 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,073 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,074 INFO L229 MonitoredProcess]: Starting monitored process 106 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,075 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (106)] Waiting until timeout for monitored process [2025-03-04 16:09:42,076 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,085 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,085 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,085 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,085 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,085 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,086 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,086 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,087 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,092 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (106)] Ended with exit code 0 [2025-03-04 16:09:42,092 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,092 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,094 INFO L229 MonitoredProcess]: Starting monitored process 107 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,094 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (107)] Waiting until timeout for monitored process [2025-03-04 16:09:42,095 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,104 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,104 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,104 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,104 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,105 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,105 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,105 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,106 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,111 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (107)] Ended with exit code 0 [2025-03-04 16:09:42,111 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,111 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,113 INFO L229 MonitoredProcess]: Starting monitored process 108 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,113 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (108)] Waiting until timeout for monitored process [2025-03-04 16:09:42,114 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,124 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,124 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,124 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,124 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,124 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,125 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,125 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,126 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,131 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (108)] Ended with exit code 0 [2025-03-04 16:09:42,131 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,131 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,132 INFO L229 MonitoredProcess]: Starting monitored process 109 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,133 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (109)] Waiting until timeout for monitored process [2025-03-04 16:09:42,134 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,143 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,144 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,144 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,144 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,144 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,144 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,144 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,145 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,150 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (109)] Ended with exit code 0 [2025-03-04 16:09:42,150 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,150 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,152 INFO L229 MonitoredProcess]: Starting monitored process 110 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,158 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (110)] Waiting until timeout for monitored process [2025-03-04 16:09:42,158 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,168 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,168 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,168 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,168 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,168 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,168 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,168 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,169 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,174 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (110)] Ended with exit code 0 [2025-03-04 16:09:42,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,175 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,176 INFO L229 MonitoredProcess]: Starting monitored process 111 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,177 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (111)] Waiting until timeout for monitored process [2025-03-04 16:09:42,178 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,187 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,187 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,187 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,187 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,187 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,187 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,187 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,188 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,193 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (111)] Ended with exit code 0 [2025-03-04 16:09:42,194 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,194 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,195 INFO L229 MonitoredProcess]: Starting monitored process 112 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,196 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (112)] Waiting until timeout for monitored process [2025-03-04 16:09:42,197 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,206 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,206 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,206 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,206 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,206 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,207 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,207 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,208 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,213 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (112)] Ended with exit code 0 [2025-03-04 16:09:42,213 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,213 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,215 INFO L229 MonitoredProcess]: Starting monitored process 113 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,215 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (113)] Waiting until timeout for monitored process [2025-03-04 16:09:42,216 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,226 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,226 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,226 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,226 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,226 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,226 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,226 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,227 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,232 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (113)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,233 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,234 INFO L229 MonitoredProcess]: Starting monitored process 114 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,235 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (114)] Waiting until timeout for monitored process [2025-03-04 16:09:42,236 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,245 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,245 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,245 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,245 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,246 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,246 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,246 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,247 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,252 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (114)] Ended with exit code 0 [2025-03-04 16:09:42,252 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,252 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,253 INFO L229 MonitoredProcess]: Starting monitored process 115 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,254 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (115)] Waiting until timeout for monitored process [2025-03-04 16:09:42,255 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,264 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,264 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,264 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,264 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,264 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,265 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,265 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,266 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,271 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (115)] Ended with exit code 0 [2025-03-04 16:09:42,272 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,272 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,274 INFO L229 MonitoredProcess]: Starting monitored process 116 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,275 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (116)] Waiting until timeout for monitored process [2025-03-04 16:09:42,276 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,286 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,286 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,286 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,286 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,286 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,286 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,286 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,287 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,292 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (116)] Ended with exit code 0 [2025-03-04 16:09:42,293 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,293 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,294 INFO L229 MonitoredProcess]: Starting monitored process 117 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,295 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (117)] Waiting until timeout for monitored process [2025-03-04 16:09:42,296 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,305 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,305 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,305 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,306 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,306 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,306 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,306 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,307 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,312 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (117)] Ended with exit code 0 [2025-03-04 16:09:42,312 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,312 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,314 INFO L229 MonitoredProcess]: Starting monitored process 118 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,314 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (118)] Waiting until timeout for monitored process [2025-03-04 16:09:42,315 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,325 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,325 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,325 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,325 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,325 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,325 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,325 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,326 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,332 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (118)] Ended with exit code 0 [2025-03-04 16:09:42,332 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,332 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,334 INFO L229 MonitoredProcess]: Starting monitored process 119 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,334 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (119)] Waiting until timeout for monitored process [2025-03-04 16:09:42,335 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,345 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,345 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,345 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,345 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,345 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,345 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,345 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,346 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,351 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (119)] Ended with exit code 0 [2025-03-04 16:09:42,352 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,352 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,353 INFO L229 MonitoredProcess]: Starting monitored process 120 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,354 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (120)] Waiting until timeout for monitored process [2025-03-04 16:09:42,355 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,364 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,364 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,365 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,365 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,365 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,365 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,365 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,366 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,371 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (120)] Ended with exit code 0 [2025-03-04 16:09:42,371 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,371 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,373 INFO L229 MonitoredProcess]: Starting monitored process 121 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,373 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (121)] Waiting until timeout for monitored process [2025-03-04 16:09:42,375 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,384 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,385 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,385 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,385 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,385 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,385 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,385 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,386 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,391 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (121)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,391 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,391 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,393 INFO L229 MonitoredProcess]: Starting monitored process 122 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,394 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (122)] Waiting until timeout for monitored process [2025-03-04 16:09:42,395 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,404 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,404 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,404 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,404 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,404 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,405 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,405 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,406 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,411 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (122)] Ended with exit code 0 [2025-03-04 16:09:42,411 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,411 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,413 INFO L229 MonitoredProcess]: Starting monitored process 123 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,414 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (123)] Waiting until timeout for monitored process [2025-03-04 16:09:42,415 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,424 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,424 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,424 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,424 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,424 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,425 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,425 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,426 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,431 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (123)] Ended with exit code 0 [2025-03-04 16:09:42,431 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,431 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,433 INFO L229 MonitoredProcess]: Starting monitored process 124 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,433 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (124)] Waiting until timeout for monitored process [2025-03-04 16:09:42,434 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,444 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,444 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,444 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,444 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,444 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,444 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,444 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,445 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,451 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (124)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,451 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,453 INFO L229 MonitoredProcess]: Starting monitored process 125 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,454 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (125)] Waiting until timeout for monitored process [2025-03-04 16:09:42,454 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,464 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,464 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,464 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,464 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,464 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,464 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,464 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,465 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,470 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (125)] Ended with exit code 0 [2025-03-04 16:09:42,471 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,471 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,473 INFO L229 MonitoredProcess]: Starting monitored process 126 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,473 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (126)] Waiting until timeout for monitored process [2025-03-04 16:09:42,474 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,484 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,484 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,484 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,484 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,484 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,484 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,484 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,485 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,490 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (126)] Ended with exit code 0 [2025-03-04 16:09:42,491 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,491 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,492 INFO L229 MonitoredProcess]: Starting monitored process 127 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,493 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (127)] Waiting until timeout for monitored process [2025-03-04 16:09:42,495 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,505 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,505 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,505 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,505 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,505 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,505 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,505 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,506 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,511 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (127)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,511 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,512 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,514 INFO L229 MonitoredProcess]: Starting monitored process 128 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,515 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (128)] Waiting until timeout for monitored process [2025-03-04 16:09:42,515 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,525 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,525 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,525 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,525 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,525 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,525 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,525 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,526 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,531 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (128)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,532 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,532 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,534 INFO L229 MonitoredProcess]: Starting monitored process 129 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,535 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (129)] Waiting until timeout for monitored process [2025-03-04 16:09:42,536 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,546 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,546 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,546 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,546 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,546 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,546 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,546 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,547 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,553 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (129)] Ended with exit code 0 [2025-03-04 16:09:42,553 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,553 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,555 INFO L229 MonitoredProcess]: Starting monitored process 130 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,556 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (130)] Waiting until timeout for monitored process [2025-03-04 16:09:42,557 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,566 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,566 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,567 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,567 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,567 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,567 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,567 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,568 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,574 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (130)] Forceful destruction successful, exit code 0 [2025-03-04 16:09:42,574 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,574 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,576 INFO L229 MonitoredProcess]: Starting monitored process 131 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,576 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (131)] Waiting until timeout for monitored process [2025-03-04 16:09:42,577 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,587 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,587 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,587 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,587 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,587 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,587 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,587 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,588 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,593 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (131)] Ended with exit code 0 [2025-03-04 16:09:42,593 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,594 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,595 INFO L229 MonitoredProcess]: Starting monitored process 132 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,596 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (132)] Waiting until timeout for monitored process [2025-03-04 16:09:42,597 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,606 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,606 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,606 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,606 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,606 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,606 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,606 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,607 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,613 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (132)] Ended with exit code 0 [2025-03-04 16:09:42,613 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,613 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,614 INFO L229 MonitoredProcess]: Starting monitored process 133 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,615 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (133)] Waiting until timeout for monitored process [2025-03-04 16:09:42,616 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,625 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,625 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,625 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,625 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,625 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,626 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,626 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,627 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,632 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (133)] Ended with exit code 0 [2025-03-04 16:09:42,632 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,632 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,634 INFO L229 MonitoredProcess]: Starting monitored process 134 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,634 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (134)] Waiting until timeout for monitored process [2025-03-04 16:09:42,635 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,645 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,645 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,645 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,645 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,645 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,645 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,645 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,646 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,651 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (134)] Ended with exit code 0 [2025-03-04 16:09:42,651 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,651 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,653 INFO L229 MonitoredProcess]: Starting monitored process 135 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,654 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (135)] Waiting until timeout for monitored process [2025-03-04 16:09:42,655 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,664 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,664 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,664 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,664 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,664 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,664 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,664 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,665 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-04 16:09:42,670 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (135)] Ended with exit code 0 [2025-03-04 16:09:42,670 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,671 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,672 INFO L229 MonitoredProcess]: Starting monitored process 136 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,673 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (136)] Waiting until timeout for monitored process [2025-03-04 16:09:42,674 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-04 16:09:42,683 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-04 16:09:42,683 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-04 16:09:42,683 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-04 16:09:42,683 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-04 16:09:42,683 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-04 16:09:42,684 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-04 16:09:42,684 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-04 16:09:42,685 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2025-03-04 16:09:42,687 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2025-03-04 16:09:42,687 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 0 variables to zero. [2025-03-04 16:09:42,687 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-04 16:09:42,687 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-04 16:09:42,689 INFO L229 MonitoredProcess]: Starting monitored process 137 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-04 16:09:42,689 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (137)] Waiting until timeout for monitored process [2025-03-04 16:09:42,690 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2025-03-04 16:09:42,690 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2025-03-04 16:09:42,690 INFO L474 LassoAnalysis]: Proved termination. [2025-03-04 16:09:42,690 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = -2*~currentFloorID~0 + 1 Supporting invariants [] [2025-03-04 16:09:42,695 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (136)] Ended with exit code 0 [2025-03-04 16:09:42,696 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2025-03-04 16:09:42,709 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:42,784 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 175 statements into 1 equivalence classes. [2025-03-04 16:09:42,888 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 175 of 175 statements. [2025-03-04 16:09:42,888 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:42,889 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:42,893 INFO L256 TraceCheckSpWp]: Trace formula consists of 1127 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-03-04 16:09:42,901 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-04 16:09:43,101 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 52 statements into 1 equivalence classes. [2025-03-04 16:09:43,119 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 52 of 52 statements. [2025-03-04 16:09:43,119 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:43,119 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:43,120 INFO L256 TraceCheckSpWp]: Trace formula consists of 199 conjuncts, 8 conjuncts are in the unsatisfiable core [2025-03-04 16:09:43,122 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-04 16:09:43,312 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:43,313 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2025-03-04 16:09:43,314 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 60607 states and 111507 transitions. cyclomatic complexity: 50915 Second operand has 7 states, 7 states have (on average 32.42857142857143) internal successors, (227), 7 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:44,364 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (137)] Ended with exit code 0 [2025-03-04 16:09:44,550 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 60607 states and 111507 transitions. cyclomatic complexity: 50915. Second operand has 7 states, 7 states have (on average 32.42857142857143) internal successors, (227), 7 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 135143 states and 248021 transitions. Complement of second has 16 states. [2025-03-04 16:09:44,550 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 6 non-accepting loop states 1 accepting loop states [2025-03-04 16:09:44,551 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 32.42857142857143) internal successors, (227), 7 states have internal predecessors, (227), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:44,558 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 15116 transitions. [2025-03-04 16:09:44,558 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15116 transitions. Stem has 175 letters. Loop has 52 letters. [2025-03-04 16:09:44,558 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:44,558 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15116 transitions. Stem has 227 letters. Loop has 52 letters. [2025-03-04 16:09:44,559 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:44,559 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15116 transitions. Stem has 175 letters. Loop has 104 letters. [2025-03-04 16:09:44,559 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-04 16:09:44,559 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135143 states and 248021 transitions. [2025-03-04 16:09:45,000 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 24736 [2025-03-04 16:09:45,289 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135143 states to 87758 states and 161095 transitions. [2025-03-04 16:09:45,289 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 53997 [2025-03-04 16:09:45,324 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 54005 [2025-03-04 16:09:45,324 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87758 states and 161095 transitions. [2025-03-04 16:09:45,326 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:45,326 INFO L218 hiAutomatonCegarLoop]: Abstraction has 87758 states and 161095 transitions. [2025-03-04 16:09:45,377 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87758 states and 161095 transitions. [2025-03-04 16:09:46,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87758 to 85547. [2025-03-04 16:09:46,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85547 states, 85547 states have (on average 1.8380656247442926) internal successors, (157241), 85546 states have internal predecessors, (157241), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:46,556 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85547 states to 85547 states and 157241 transitions. [2025-03-04 16:09:46,556 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85547 states and 157241 transitions. [2025-03-04 16:09:46,556 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:46,557 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 16:09:46,557 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 16:09:46,557 INFO L87 Difference]: Start difference. First operand 85547 states and 157241 transitions. Second operand has 3 states, 3 states have (on average 58.333333333333336) internal successors, (175), 3 states have internal predecessors, (175), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:46,851 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:46,851 INFO L93 Difference]: Finished difference Result 85337 states and 156821 transitions. [2025-03-04 16:09:46,851 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 85337 states and 156821 transitions. [2025-03-04 16:09:47,431 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23068 [2025-03-04 16:09:47,633 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 85337 states to 85337 states and 156821 transitions. [2025-03-04 16:09:47,634 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51693 [2025-03-04 16:09:47,672 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51693 [2025-03-04 16:09:47,672 INFO L73 IsDeterministic]: Start isDeterministic. Operand 85337 states and 156821 transitions. [2025-03-04 16:09:47,689 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:47,689 INFO L218 hiAutomatonCegarLoop]: Abstraction has 85337 states and 156821 transitions. [2025-03-04 16:09:47,744 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85337 states and 156821 transitions. [2025-03-04 16:09:48,348 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85337 to 85337. [2025-03-04 16:09:48,423 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85337 states, 85337 states have (on average 1.8376671314904438) internal successors, (156821), 85336 states have internal predecessors, (156821), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:48,549 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85337 states to 85337 states and 156821 transitions. [2025-03-04 16:09:48,549 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85337 states and 156821 transitions. [2025-03-04 16:09:48,549 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 16:09:48,550 INFO L432 stractBuchiCegarLoop]: Abstraction has 85337 states and 156821 transitions. [2025-03-04 16:09:48,550 INFO L338 stractBuchiCegarLoop]: ======== Iteration 9 ============ [2025-03-04 16:09:48,550 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85337 states and 156821 transitions. [2025-03-04 16:09:48,931 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23068 [2025-03-04 16:09:48,931 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:48,931 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:48,933 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:48,933 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:48,933 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:48,934 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 2;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret37#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~0#1 := __utac_acc__Specification3_spec__1_#t~ret37#1;havoc __utac_acc__Specification3_spec__1_#t~ret37#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~6#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1;" "assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6#1);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:48,934 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:48,934 INFO L85 PathProgramCache]: Analyzing trace with hash 500843939, now seen corresponding path program 1 times [2025-03-04 16:09:48,934 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:48,935 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2105379964] [2025-03-04 16:09:48,935 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:48,935 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:48,954 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 182 statements into 1 equivalence classes. [2025-03-04 16:09:48,958 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 182 of 182 statements. [2025-03-04 16:09:48,958 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:48,958 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:49,006 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:49,007 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:49,007 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2105379964] [2025-03-04 16:09:49,007 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2105379964] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:49,007 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:49,007 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:49,007 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1216126399] [2025-03-04 16:09:49,007 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:49,007 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:49,007 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:49,008 INFO L85 PathProgramCache]: Analyzing trace with hash 1159225758, now seen corresponding path program 1 times [2025-03-04 16:09:49,008 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:49,008 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [713233335] [2025-03-04 16:09:49,008 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:49,008 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:49,016 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 53 statements into 1 equivalence classes. [2025-03-04 16:09:49,018 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 53 of 53 statements. [2025-03-04 16:09:49,018 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:49,018 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:49,033 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:49,034 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:49,034 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [713233335] [2025-03-04 16:09:49,034 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [713233335] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:49,034 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:49,034 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:49,034 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [696158723] [2025-03-04 16:09:49,034 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:49,034 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:49,034 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:49,034 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 16:09:49,035 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 16:09:49,036 INFO L87 Difference]: Start difference. First operand 85337 states and 156821 transitions. cyclomatic complexity: 71512 Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:49,641 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:49,641 INFO L93 Difference]: Finished difference Result 85265 states and 156605 transitions. [2025-03-04 16:09:49,641 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 85265 states and 156605 transitions. [2025-03-04 16:09:50,103 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23046 [2025-03-04 16:09:50,319 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 85265 states to 85265 states and 156605 transitions. [2025-03-04 16:09:50,319 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51649 [2025-03-04 16:09:50,359 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51649 [2025-03-04 16:09:50,360 INFO L73 IsDeterministic]: Start isDeterministic. Operand 85265 states and 156605 transitions. [2025-03-04 16:09:50,360 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:50,360 INFO L218 hiAutomatonCegarLoop]: Abstraction has 85265 states and 156605 transitions. [2025-03-04 16:09:50,415 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85265 states and 156605 transitions. [2025-03-04 16:09:51,331 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85265 to 85265. [2025-03-04 16:09:51,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85265 states, 85265 states have (on average 1.8366856271623762) internal successors, (156605), 85264 states have internal predecessors, (156605), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:51,530 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85265 states to 85265 states and 156605 transitions. [2025-03-04 16:09:51,530 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85265 states and 156605 transitions. [2025-03-04 16:09:51,531 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 16:09:51,531 INFO L432 stractBuchiCegarLoop]: Abstraction has 85265 states and 156605 transitions. [2025-03-04 16:09:51,531 INFO L338 stractBuchiCegarLoop]: ======== Iteration 10 ============ [2025-03-04 16:09:51,531 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85265 states and 156605 transitions. [2025-03-04 16:09:51,708 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23046 [2025-03-04 16:09:51,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:51,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:51,711 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:51,711 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:51,711 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:51,711 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 4;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume 1 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_1~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret39#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___0~2#1 := __utac_acc__Specification3_spec__1_#t~ret39#1;havoc __utac_acc__Specification3_spec__1_#t~ret39#1;" "assume !(0 != __utac_acc__Specification3_spec__1_~tmp___0~2#1);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:51,712 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:51,712 INFO L85 PathProgramCache]: Analyzing trace with hash 500843939, now seen corresponding path program 2 times [2025-03-04 16:09:51,712 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:51,712 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [893018897] [2025-03-04 16:09:51,712 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-04 16:09:51,712 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:51,732 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 182 statements into 1 equivalence classes. [2025-03-04 16:09:51,736 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 182 of 182 statements. [2025-03-04 16:09:51,736 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-04 16:09:51,736 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:51,783 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:51,783 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:51,783 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [893018897] [2025-03-04 16:09:51,783 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [893018897] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:51,783 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:51,783 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:51,783 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [510519106] [2025-03-04 16:09:51,783 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:51,784 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:51,784 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:51,784 INFO L85 PathProgramCache]: Analyzing trace with hash 999618768, now seen corresponding path program 1 times [2025-03-04 16:09:51,784 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:51,784 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [831473852] [2025-03-04 16:09:51,784 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:51,784 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:51,793 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 53 statements into 1 equivalence classes. [2025-03-04 16:09:51,794 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 53 of 53 statements. [2025-03-04 16:09:51,794 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:51,794 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:51,805 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:51,805 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:51,805 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [831473852] [2025-03-04 16:09:51,805 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [831473852] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:51,805 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:51,806 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-04 16:09:51,806 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [750220910] [2025-03-04 16:09:51,806 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:51,806 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:51,806 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:51,806 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-04 16:09:51,806 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-04 16:09:51,806 INFO L87 Difference]: Start difference. First operand 85265 states and 156605 transitions. cyclomatic complexity: 71368 Second operand has 3 states, 3 states have (on average 17.666666666666668) internal successors, (53), 3 states have internal predecessors, (53), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:52,788 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:09:52,788 INFO L93 Difference]: Finished difference Result 85265 states and 156497 transitions. [2025-03-04 16:09:52,788 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 85265 states and 156497 transitions. [2025-03-04 16:09:53,042 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23046 [2025-03-04 16:09:53,255 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 85265 states to 85265 states and 156497 transitions. [2025-03-04 16:09:53,255 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 51649 [2025-03-04 16:09:53,300 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 51649 [2025-03-04 16:09:53,301 INFO L73 IsDeterministic]: Start isDeterministic. Operand 85265 states and 156497 transitions. [2025-03-04 16:09:53,304 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:09:53,305 INFO L218 hiAutomatonCegarLoop]: Abstraction has 85265 states and 156497 transitions. [2025-03-04 16:09:53,392 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 85265 states and 156497 transitions. [2025-03-04 16:09:54,192 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 85265 to 85265. [2025-03-04 16:09:54,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 85265 states, 85265 states have (on average 1.8354189878613734) internal successors, (156497), 85264 states have internal predecessors, (156497), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:09:54,395 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85265 states to 85265 states and 156497 transitions. [2025-03-04 16:09:54,395 INFO L240 hiAutomatonCegarLoop]: Abstraction has 85265 states and 156497 transitions. [2025-03-04 16:09:54,396 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-04 16:09:54,396 INFO L432 stractBuchiCegarLoop]: Abstraction has 85265 states and 156497 transitions. [2025-03-04 16:09:54,396 INFO L338 stractBuchiCegarLoop]: ======== Iteration 11 ============ [2025-03-04 16:09:54,396 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85265 states and 156497 transitions. [2025-03-04 16:09:54,843 INFO L131 ngComponentsAnalysis]: Automaton has 12 accepting balls. 23046 [2025-03-04 16:09:54,843 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:09:54,843 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:09:54,845 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:54,845 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:09:54,846 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:54,846 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 2;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume !(0 == buttonForFloorIsPressed_~floorID#1);" "assume !(1 == buttonForFloorIsPressed_~floorID#1);" "assume 2 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_2~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret37#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___2~0#1 := __utac_acc__Specification3_spec__1_#t~ret37#1;havoc __utac_acc__Specification3_spec__1_#t~ret37#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___2~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret46#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~6#1 := __utac_acc__Specification3_spec__2_#t~ret46#1;havoc __utac_acc__Specification3_spec__2_#t~ret46#1;" "assume !(0 == __utac_acc__Specification3_spec__2_~tmp~6#1);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:09:54,847 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:54,847 INFO L85 PathProgramCache]: Analyzing trace with hash 500843939, now seen corresponding path program 3 times [2025-03-04 16:09:54,847 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:54,847 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2083570234] [2025-03-04 16:09:54,847 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST2 [2025-03-04 16:09:54,847 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:54,867 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 partitioned 182 statements into 1 equivalence classes. [2025-03-04 16:09:54,870 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) and asserted 182 of 182 statements. [2025-03-04 16:09:54,871 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST2 issued 1 check-sat command(s) [2025-03-04 16:09:54,871 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:54,916 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:54,917 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:54,917 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2083570234] [2025-03-04 16:09:54,917 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2083570234] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:54,917 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:54,917 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:09:54,917 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [272572536] [2025-03-04 16:09:54,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:54,917 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:09:54,918 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:09:54,918 INFO L85 PathProgramCache]: Analyzing trace with hash 1654584488, now seen corresponding path program 1 times [2025-03-04 16:09:54,918 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:09:54,918 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [179251784] [2025-03-04 16:09:54,918 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:09:54,918 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:09:54,929 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 54 statements into 1 equivalence classes. [2025-03-04 16:09:54,932 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 54 of 54 statements. [2025-03-04 16:09:54,932 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:09:54,932 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:09:55,173 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:09:55,174 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:09:55,174 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [179251784] [2025-03-04 16:09:55,174 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [179251784] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:09:55,174 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:09:55,174 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [14] imperfect sequences [] total 14 [2025-03-04 16:09:55,174 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [261136664] [2025-03-04 16:09:55,174 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:09:55,174 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:09:55,174 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:09:55,175 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 14 interpolants. [2025-03-04 16:09:55,175 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=31, Invalid=151, Unknown=0, NotChecked=0, Total=182 [2025-03-04 16:09:55,175 INFO L87 Difference]: Start difference. First operand 85265 states and 156497 transitions. cyclomatic complexity: 71260 Second operand has 14 states, 14 states have (on average 3.857142857142857) internal successors, (54), 14 states have internal predecessors, (54), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:10:02,534 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:10:02,535 INFO L93 Difference]: Finished difference Result 191626 states and 351454 transitions. [2025-03-04 16:10:02,535 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 191626 states and 351454 transitions. [2025-03-04 16:10:03,379 INFO L131 ngComponentsAnalysis]: Automaton has 24 accepting balls. 53767 [2025-03-04 16:10:03,810 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 191626 states to 191298 states and 351118 transitions. [2025-03-04 16:10:03,810 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 119309 [2025-03-04 16:10:03,897 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 119309 [2025-03-04 16:10:03,898 INFO L73 IsDeterministic]: Start isDeterministic. Operand 191298 states and 351118 transitions. [2025-03-04 16:10:03,924 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:10:03,924 INFO L218 hiAutomatonCegarLoop]: Abstraction has 191298 states and 351118 transitions. [2025-03-04 16:10:04,050 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 191298 states and 351118 transitions. [2025-03-04 16:10:05,497 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 191298 to 148590. [2025-03-04 16:10:05,628 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148590 states, 148590 states have (on average 1.8362877717208426) internal successors, (272854), 148589 states have internal predecessors, (272854), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:10:05,898 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148590 states to 148590 states and 272854 transitions. [2025-03-04 16:10:05,898 INFO L240 hiAutomatonCegarLoop]: Abstraction has 148590 states and 272854 transitions. [2025-03-04 16:10:05,898 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 21 states. [2025-03-04 16:10:05,899 INFO L432 stractBuchiCegarLoop]: Abstraction has 148590 states and 272854 transitions. [2025-03-04 16:10:05,899 INFO L338 stractBuchiCegarLoop]: ======== Iteration 12 ============ [2025-03-04 16:10:05,899 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148590 states and 272854 transitions. [2025-03-04 16:10:06,621 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 39096 [2025-03-04 16:10:06,621 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:10:06,621 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:10:06,623 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:10:06,623 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:10:06,626 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:10:06,627 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume !(0 != timeShift_~tmp___8~3#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1;" "assume 0 == getReverseHeading_~ofHeading#1;getReverseHeading_~retValue_acc~21#1 := 1;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1;" "timeShift_#t~ret95#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~3#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1;" "assume 0 != timeShift_~tmp___7~3#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1;" "timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~3#1;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:10:06,628 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:10:06,628 INFO L85 PathProgramCache]: Analyzing trace with hash 500843939, now seen corresponding path program 4 times [2025-03-04 16:10:06,628 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:10:06,628 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1182729116] [2025-03-04 16:10:06,628 INFO L95 rtionOrderModulation]: Changing assertion order to TERMS_WITH_SMALL_CONSTANTS_FIRST [2025-03-04 16:10:06,628 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:10:06,648 INFO L108 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST partitioned 182 statements into 2 equivalence classes. [2025-03-04 16:10:06,650 INFO L111 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) and asserted 181 of 182 statements. [2025-03-04 16:10:06,650 INFO L114 AnnotateAndAsserter]: Assert order TERMS_WITH_SMALL_CONSTANTS_FIRST issued 1 check-sat command(s) [2025-03-04 16:10:06,650 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:10:06,687 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:10:06,687 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:10:06,687 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1182729116] [2025-03-04 16:10:06,687 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1182729116] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:10:06,687 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:10:06,687 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:10:06,687 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1653683819] [2025-03-04 16:10:06,687 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:10:06,688 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:10:06,688 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:10:06,688 INFO L85 PathProgramCache]: Analyzing trace with hash -1085592054, now seen corresponding path program 1 times [2025-03-04 16:10:06,688 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:10:06,688 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [898056828] [2025-03-04 16:10:06,688 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:10:06,688 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:10:06,698 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 61 statements into 1 equivalence classes. [2025-03-04 16:10:06,701 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 61 of 61 statements. [2025-03-04 16:10:06,701 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:10:06,701 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:10:06,767 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:10:06,768 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:10:06,768 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [898056828] [2025-03-04 16:10:06,768 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [898056828] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:10:06,768 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:10:06,768 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-04 16:10:06,768 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1666093448] [2025-03-04 16:10:06,768 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:10:06,768 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:10:06,768 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:10:06,769 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-04 16:10:06,769 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2025-03-04 16:10:06,769 INFO L87 Difference]: Start difference. First operand 148590 states and 272854 transitions. cyclomatic complexity: 124299 Second operand has 7 states, 7 states have (on average 8.714285714285714) internal successors, (61), 7 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:10:07,894 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-04 16:10:07,895 INFO L93 Difference]: Finished difference Result 148835 states and 273046 transitions. [2025-03-04 16:10:07,895 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 148835 states and 273046 transitions. [2025-03-04 16:10:08,755 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 39126 [2025-03-04 16:10:09,125 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 148835 states to 148835 states and 273046 transitions. [2025-03-04 16:10:09,125 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 90689 [2025-03-04 16:10:09,197 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 90689 [2025-03-04 16:10:09,197 INFO L73 IsDeterministic]: Start isDeterministic. Operand 148835 states and 273046 transitions. [2025-03-04 16:10:09,222 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-04 16:10:09,222 INFO L218 hiAutomatonCegarLoop]: Abstraction has 148835 states and 273046 transitions. [2025-03-04 16:10:09,326 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 148835 states and 273046 transitions. [2025-03-04 16:10:10,564 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 148835 to 148751. [2025-03-04 16:10:11,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 148751 states, 148751 states have (on average 1.8350263191507956) internal successors, (272962), 148750 states have internal predecessors, (272962), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-04 16:10:11,288 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148751 states to 148751 states and 272962 transitions. [2025-03-04 16:10:11,289 INFO L240 hiAutomatonCegarLoop]: Abstraction has 148751 states and 272962 transitions. [2025-03-04 16:10:11,289 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2025-03-04 16:10:11,289 INFO L432 stractBuchiCegarLoop]: Abstraction has 148751 states and 272962 transitions. [2025-03-04 16:10:11,289 INFO L338 stractBuchiCegarLoop]: ======== Iteration 13 ============ [2025-03-04 16:10:11,289 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148751 states and 272962 transitions. [2025-03-04 16:10:11,606 INFO L131 ngComponentsAnalysis]: Automaton has 16 accepting balls. 39097 [2025-03-04 16:10:11,606 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-04 16:10:11,606 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-04 16:10:11,609 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:10:11,609 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-04 16:10:11,609 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;" "assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true;" "assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;" "assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1;" "main_#t~ret138#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1;" "assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true;" "assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;" "assume { :end_inline_initFloors } true;" "assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;" "assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1;" "bobCall_#t~ret126#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume !(0 == initPersonOnFloor_~floor#1);" "assume !(1 == initPersonOnFloor_~floor#1);" "assume !(2 == initPersonOnFloor_~floor#1);" "assume !(3 == initPersonOnFloor_~floor#1);" "assume 4 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_4~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;" "havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;" "havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:10:11,610 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret132#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1;" "assume 1 != cleanup_~tmp___0~12#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret53#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret133#1 := isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1;" "assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1;" "assume !(0 != timeShift_~tmp___8~3#1);assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1;" "timeShift_#t~ret95#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___6~3#1 := timeShift_#t~ret95#1;havoc timeShift_#t~ret95#1;assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := timeShift_~tmp___6~3#1, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1;" "isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1;" "assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret96#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___7~3#1 := timeShift_#t~ret96#1;havoc timeShift_#t~ret96#1;" "assume 0 != timeShift_~tmp___7~3#1;assume { :begin_inline_getReverseHeading } true;getReverseHeading_#in~ofHeading#1 := ~currentHeading~0;havoc getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;getReverseHeading_~ofHeading#1 := getReverseHeading_#in~ofHeading#1;havoc getReverseHeading_~retValue_acc~21#1;" "assume !(0 == getReverseHeading_~ofHeading#1);getReverseHeading_~retValue_acc~21#1 := 0;getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1;" "timeShift_#t~ret97#1 := getReverseHeading_#res#1;havoc getReverseHeading_~ofHeading#1, getReverseHeading_~retValue_acc~21#1;havoc getReverseHeading_#in~ofHeading#1;assume { :end_inline_getReverseHeading } true;timeShift_~tmp___5~3#1 := timeShift_#t~ret97#1;havoc timeShift_#t~ret97#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := timeShift_~tmp___5~3#1;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1;" "continueInDirection_#t~ret68#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1;" "assume !(0 != continueInDirection_~tmp~11#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;" "havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1;" "assume true;" "cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-04 16:10:11,612 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:10:11,612 INFO L85 PathProgramCache]: Analyzing trace with hash 500843939, now seen corresponding path program 5 times [2025-03-04 16:10:11,612 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:10:11,612 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1762337029] [2025-03-04 16:10:11,612 INFO L95 rtionOrderModulation]: Changing assertion order to INSIDE_LOOP_FIRST1 [2025-03-04 16:10:11,612 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:10:11,633 INFO L108 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 partitioned 182 statements into 1 equivalence classes. [2025-03-04 16:10:11,636 INFO L111 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 182 of 182 statements. [2025-03-04 16:10:11,636 INFO L114 AnnotateAndAsserter]: Assert order INSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-04 16:10:11,636 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:10:11,707 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:10:11,707 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:10:11,707 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1762337029] [2025-03-04 16:10:11,707 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1762337029] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:10:11,707 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:10:11,707 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-04 16:10:11,707 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [16944888] [2025-03-04 16:10:11,707 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:10:11,707 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-04 16:10:11,708 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-04 16:10:11,708 INFO L85 PathProgramCache]: Analyzing trace with hash -1219605560, now seen corresponding path program 1 times [2025-03-04 16:10:11,708 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-04 16:10:11,708 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1825950794] [2025-03-04 16:10:11,708 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-04 16:10:11,708 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-04 16:10:11,718 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 61 statements into 1 equivalence classes. [2025-03-04 16:10:11,722 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 61 of 61 statements. [2025-03-04 16:10:11,723 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-04 16:10:11,723 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-04 16:10:11,757 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-04 16:10:11,758 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-04 16:10:11,758 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1825950794] [2025-03-04 16:10:11,758 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1825950794] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-04 16:10:11,758 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-04 16:10:11,758 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2025-03-04 16:10:11,758 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2126008492] [2025-03-04 16:10:11,758 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-04 16:10:11,758 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-04 16:10:11,758 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-04 16:10:11,758 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2025-03-04 16:10:11,758 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2025-03-04 16:10:11,759 INFO L87 Difference]: Start difference. First operand 148751 states and 272962 transitions. cyclomatic complexity: 124246 Second operand has 6 states, 6 states have (on average 10.166666666666666) internal successors, (61), 6 states have internal predecessors, (61), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0)