./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 8fc3dc66 Calling Ultimate with: /root/.sdkman/candidates/java/21.0.5-tem/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.6.800.v20240513-1750.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b --- Real Ultimate output --- This is Ultimate 0.3.0-?-8fc3dc6-m [2025-03-17 20:25:58,436 INFO L188 SettingsManager]: Resetting all preferences to default values... [2025-03-17 20:25:58,473 INFO L114 SettingsManager]: Loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2025-03-17 20:25:58,477 WARN L101 SettingsManager]: Preference file contains the following unknown settings: [2025-03-17 20:25:58,477 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.core.Log level for class [2025-03-17 20:25:58,477 WARN L103 SettingsManager]: * de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder.Remove goto edges from RCFG [2025-03-17 20:25:58,492 INFO L130 SettingsManager]: Preferences different from defaults after loading the file: [2025-03-17 20:25:58,492 INFO L151 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2025-03-17 20:25:58,492 INFO L153 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2025-03-17 20:25:58,492 INFO L151 SettingsManager]: Preferences of Boogie Preprocessor differ from their defaults: [2025-03-17 20:25:58,492 INFO L153 SettingsManager]: * Use memory slicer=true [2025-03-17 20:25:58,493 INFO L151 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Create parallel compositions if possible=false [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Use SBE=true [2025-03-17 20:25:58,493 INFO L151 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Use old map elimination=false [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Use external solver (rank synthesis)=false [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Use only trivial implications for array writes=true [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2025-03-17 20:25:58,493 INFO L151 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * sizeof long=4 [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Overapproximate operations on floating types=true [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * sizeof POINTER=4 [2025-03-17 20:25:58,493 INFO L153 SettingsManager]: * Check division by zero=IGNORE [2025-03-17 20:25:58,497 INFO L153 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2025-03-17 20:25:58,497 INFO L153 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2025-03-17 20:25:58,497 INFO L153 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2025-03-17 20:25:58,497 INFO L153 SettingsManager]: * Check unreachability of reach_error function=false [2025-03-17 20:25:58,498 INFO L153 SettingsManager]: * sizeof long double=12 [2025-03-17 20:25:58,498 INFO L153 SettingsManager]: * Check if freed pointer was valid=false [2025-03-17 20:25:58,498 INFO L153 SettingsManager]: * Assume nondeterminstic values are in range=false [2025-03-17 20:25:58,498 INFO L153 SettingsManager]: * Behaviour of calls to undefined functions=OVERAPPROXIMATE_BEHAVIOUR [2025-03-17 20:25:58,498 INFO L153 SettingsManager]: * Use constant arrays=true [2025-03-17 20:25:58,499 INFO L151 SettingsManager]: Preferences of IcfgBuilder differ from their defaults: [2025-03-17 20:25:58,499 INFO L153 SettingsManager]: * Size of a code block=SequenceOfStatements [2025-03-17 20:25:58,499 INFO L151 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2025-03-17 20:25:58,499 INFO L153 SettingsManager]: * Trace refinement strategy=CAMEL [2025-03-17 20:25:58,499 INFO L151 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2025-03-17 20:25:58,499 INFO L153 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b [2025-03-17 20:25:58,730 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2025-03-17 20:25:58,737 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2025-03-17 20:25:58,738 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2025-03-17 20:25:58,739 INFO L270 PluginConnector]: Initializing CDTParser... [2025-03-17 20:25:58,739 INFO L274 PluginConnector]: CDTParser initialized [2025-03-17 20:25:58,740 INFO L431 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2025-03-17 20:25:59,877 INFO L533 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2acaa94c4/1ac2f8b9c93c4312a512e871e4721b7d/FLAG91d7d7f22 [2025-03-17 20:26:00,196 INFO L384 CDTParser]: Found 1 translation units. [2025-03-17 20:26:00,197 INFO L180 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2025-03-17 20:26:00,215 INFO L427 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2acaa94c4/1ac2f8b9c93c4312a512e871e4721b7d/FLAG91d7d7f22 [2025-03-17 20:26:00,455 INFO L435 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/2acaa94c4/1ac2f8b9c93c4312a512e871e4721b7d [2025-03-17 20:26:00,457 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2025-03-17 20:26:00,458 INFO L133 ToolchainWalker]: Walking toolchain with 6 elements. [2025-03-17 20:26:00,459 INFO L112 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2025-03-17 20:26:00,459 INFO L270 PluginConnector]: Initializing CACSL2BoogieTranslator... [2025-03-17 20:26:00,462 INFO L274 PluginConnector]: CACSL2BoogieTranslator initialized [2025-03-17 20:26:00,463 INFO L184 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:26:00" (1/1) ... [2025-03-17 20:26:00,463 INFO L204 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4e194ceb and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:00, skipping insertion in model container [2025-03-17 20:26:00,463 INFO L184 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 17.03 08:26:00" (1/1) ... [2025-03-17 20:26:00,499 INFO L175 MainTranslator]: Built tables and reachable declarations [2025-03-17 20:26:00,893 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:26:00,904 INFO L200 MainTranslator]: Completed pre-run [2025-03-17 20:26:00,910 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"wsllib_check.i","") [48] [2025-03-17 20:26:00,911 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"libacc.i","") [57] [2025-03-17 20:26:00,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"UnitTests.i","") [423] [2025-03-17 20:26:00,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Person.i","") [523] [2025-03-17 20:26:00,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Specification3_spec.i","") [643] [2025-03-17 20:26:00,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Test.i","") [832] [2025-03-17 20:26:00,912 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"scenario.i","") [1185] [2025-03-17 20:26:00,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Elevator.i","") [1200] [2025-03-17 20:26:00,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"Floor.i","") [2726] [2025-03-17 20:26:00,913 WARN L75 lationResultReporter]: Unsoundness Warning: Ignoring preprocessor pragma C: #pragma merger(0,"featureselect.i","") [3387] [2025-03-17 20:26:00,982 INFO L210 PostProcessor]: Analyzing one entry point: main [2025-03-17 20:26:01,008 INFO L204 MainTranslator]: Completed translation [2025-03-17 20:26:01,008 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01 WrapperNode [2025-03-17 20:26:01,008 INFO L131 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2025-03-17 20:26:01,009 INFO L112 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2025-03-17 20:26:01,009 INFO L270 PluginConnector]: Initializing Boogie Procedure Inliner... [2025-03-17 20:26:01,009 INFO L274 PluginConnector]: Boogie Procedure Inliner initialized [2025-03-17 20:26:01,014 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,031 INFO L184 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,271 INFO L138 Inliner]: procedures = 91, calls = 345, calls flagged for inlining = 198, calls inlined = 698, statements flattened = 21979 [2025-03-17 20:26:01,272 INFO L131 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2025-03-17 20:26:01,273 INFO L112 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2025-03-17 20:26:01,273 INFO L270 PluginConnector]: Initializing Boogie Preprocessor... [2025-03-17 20:26:01,273 INFO L274 PluginConnector]: Boogie Preprocessor initialized [2025-03-17 20:26:01,280 INFO L184 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,280 INFO L184 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,316 INFO L184 PluginConnector]: Executing the observer MemorySlicer from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,405 INFO L175 MemorySlicer]: Split 81 memory accesses to 20 slices as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. 9 percent of accesses are in the largest equivalence class. The 81 initializations are split as follows [2, 4, 4, 4, 2, 4, 4, 5, 3, 3, 5, 7, 4, 4, 4, 4, 4, 6, 4, 4]. The 0 writes are split as follows [0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]. [2025-03-17 20:26:01,406 INFO L184 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,407 INFO L184 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,497 INFO L184 PluginConnector]: Executing the observer ReplaceArrayAssignments from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,514 INFO L184 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,540 INFO L184 PluginConnector]: Executing the observer LTLStepAnnotator from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,557 INFO L184 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,588 INFO L131 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2025-03-17 20:26:01,621 INFO L112 PluginConnector]: ------------------------IcfgBuilder---------------------------- [2025-03-17 20:26:01,621 INFO L270 PluginConnector]: Initializing IcfgBuilder... [2025-03-17 20:26:01,621 INFO L274 PluginConnector]: IcfgBuilder initialized [2025-03-17 20:26:01,622 INFO L184 PluginConnector]: Executing the observer IcfgBuilderObserver from plugin IcfgBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (1/1) ... [2025-03-17 20:26:01,626 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:01,635 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:01,649 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:01,651 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#0 [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#1 [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#2 [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#3 [2025-03-17 20:26:01,669 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#4 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#5 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#6 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#7 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#8 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#9 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#10 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#11 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#12 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#13 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#14 [2025-03-17 20:26:01,670 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#15 [2025-03-17 20:26:01,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#16 [2025-03-17 20:26:01,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#17 [2025-03-17 20:26:01,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#18 [2025-03-17 20:26:01,671 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int#19 [2025-03-17 20:26:01,671 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2025-03-17 20:26:01,671 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2025-03-17 20:26:01,836 INFO L256 CfgBuilder]: Building ICFG [2025-03-17 20:26:01,838 INFO L286 CfgBuilder]: Building CFG for each procedure with an implementation [2025-03-17 20:26:09,027 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-1: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-3: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-5: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-7: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-9: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-11: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-13: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,028 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-15: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,029 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-17: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,029 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2085-19: stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1; [2025-03-17 20:26:09,029 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2116-1: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-17 20:26:09,029 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2116-3: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2116-5: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2116-7: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2116-9: stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1601-1: anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-1: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-3: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-5: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-7: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-9: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-11: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-13: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-15: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-17: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,030 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2130-19: getReverseHeading_#res#1 := getReverseHeading_~retValue_acc~21#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1614-1: isIdle_#res#1 := isIdle_~retValue_acc~15#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-1: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-3: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-5: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-7: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-9: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-11: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-13: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-15: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-17: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-19: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-21: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-23: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-25: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-27: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2714-29: isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; [2025-03-17 20:26:09,031 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L601-1: getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; [2025-03-17 20:26:09,032 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L601-3: getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; [2025-03-17 20:26:09,032 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-1: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,032 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-3: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,032 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-5: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,032 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-7: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-9: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-11: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-13: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-15: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-17: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-19: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,033 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-21: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-23: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-25: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-27: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-29: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-31: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-33: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-35: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,034 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-37: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-39: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-41: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-43: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-45: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-47: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-49: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-51: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-53: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-55: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-57: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-59: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-61: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-63: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-65: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-67: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-69: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-71: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-73: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-75: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-77: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-79: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-81: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-83: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-85: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-87: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-89: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-91: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-93: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-95: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,035 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-97: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-99: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-101: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-103: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-105: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-107: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-109: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-111: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-113: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-115: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-117: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L640-119: getDestination_#res#1 := getDestination_~retValue_acc~5#1; [2025-03-17 20:26:09,036 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1182-1: main_#res#1 := main_~retValue_acc~7#1; [2025-03-17 20:26:09,038 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-1: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,038 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-3: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,038 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-5: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,038 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-7: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-9: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-11: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-13: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-15: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-17: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-19: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-21: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,039 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-23: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,040 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-25: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,040 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-27: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,040 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-29: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,040 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-31: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,040 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-33: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-35: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-37: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-39: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-41: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-43: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-45: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-47: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-49: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-51: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-53: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-55: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-57: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-59: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-61: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-63: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-65: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-67: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-69: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-71: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-73: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-75: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-77: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-79: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-81: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-83: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-85: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-87: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-89: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-91: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-93: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-95: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-97: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-99: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-101: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,041 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-103: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-105: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-107: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-109: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-111: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-113: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-115: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-117: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-119: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-121: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-123: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-125: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,042 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-127: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,043 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-129: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,043 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-131: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-133: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-135: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-137: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-139: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-141: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-143: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-145: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-147: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-149: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-151: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-153: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-155: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-157: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-159: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-161: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-163: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-165: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-167: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-169: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,044 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-171: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-173: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-175: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-177: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-179: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-181: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-183: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-185: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-187: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-189: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-191: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-193: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-195: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-197: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-199: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-201: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-203: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-205: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-207: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-209: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-211: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-213: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-215: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-217: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-219: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-221: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-223: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-225: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-227: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-229: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-231: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-233: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-235: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-237: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-239: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,045 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-241: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-243: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-245: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-247: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-249: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-251: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-253: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,046 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-255: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-257: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L2837-259: isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-1: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-3: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-5: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-7: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-9: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,047 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-11: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-13: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-15: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-17: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-19: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-21: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-23: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-25: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-27: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-29: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-31: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-33: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-35: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-37: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-39: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,048 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-41: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-43: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-45: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-47: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3384-49: isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1280-1: isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3419-1: valid_product_#res#1 := valid_product_~retValue_acc~29#1; [2025-03-17 20:26:09,049 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-1: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-3: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-5: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-7: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-9: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-11: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-13: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-15: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-17: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-19: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-21: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-23: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-25: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-27: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-29: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-31: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-33: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-35: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-37: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1429-39: getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-1: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-3: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-5: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-7: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-9: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-11: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-13: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-15: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-17: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,050 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1966-19: stopRequestedInDirection__wrappee__empty_#res#1 := stopRequestedInDirection__wrappee__empty_~retValue_acc~16#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-1: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-3: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-5: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-7: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-9: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-11: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-13: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-15: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,053 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-17: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1995-19: stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-1: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-3: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-5: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-7: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-9: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-11: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-13: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-15: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-17: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-19: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-21: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-23: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,054 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-25: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-27: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-29: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-31: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-33: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-35: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-37: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-39: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-41: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-43: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-45: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-47: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-49: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-51: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-53: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-55: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-57: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-59: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-61: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-63: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-65: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-67: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-69: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-71: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-73: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-75: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-77: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-79: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-81: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-83: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-85: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-87: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,055 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-89: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-91: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-93: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-95: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-97: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-99: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-101: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-103: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-105: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-107: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,056 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-109: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-111: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-113: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-115: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-117: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1472-119: buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-1: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-3: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-5: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-7: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-9: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-11: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-13: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-15: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-17: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-19: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,057 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-21: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-23: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-25: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-27: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1481-29: getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-1: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-3: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-5: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-7: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-9: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-11: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-13: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-15: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-17: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-19: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,058 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-21: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-23: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-25: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-27: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-29: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-31: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-33: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-35: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-37: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-39: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-41: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-43: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-45: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-47: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-49: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-51: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-53: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-55: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-57: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L3073-59: isPersonOnFloor_#res#1 := isPersonOnFloor_~retValue_acc~26#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-1: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-3: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-5: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-7: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-9: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-11: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-13: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-15: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,059 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-17: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-19: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-21: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-23: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-25: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-27: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-29: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-31: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-33: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-35: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,060 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-37: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-39: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-41: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-43: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-45: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-47: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-49: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,061 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-51: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,062 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-53: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,062 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-55: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,062 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-57: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:09,062 INFO L1322 $ProcedureCfgBuilder]: dead code at ProgramPoint L1521-59: isEmpty_#res#1 := isEmpty_~retValue_acc~13#1; [2025-03-17 20:26:10,101 INFO L? ?]: Removed 10080 outVars from TransFormulas that were not future-live. [2025-03-17 20:26:10,101 INFO L307 CfgBuilder]: Performing block encoding [2025-03-17 20:26:10,193 INFO L331 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2025-03-17 20:26:10,193 INFO L336 CfgBuilder]: Removed 0 assume(true) statements. [2025-03-17 20:26:10,194 INFO L201 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:26:10 BoogieIcfgContainer [2025-03-17 20:26:10,194 INFO L131 PluginConnector]: ------------------------ END IcfgBuilder---------------------------- [2025-03-17 20:26:10,195 INFO L112 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2025-03-17 20:26:10,195 INFO L270 PluginConnector]: Initializing BuchiAutomizer... [2025-03-17 20:26:10,201 INFO L274 PluginConnector]: BuchiAutomizer initialized [2025-03-17 20:26:10,202 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:10,202 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 17.03 08:26:00" (1/3) ... [2025-03-17 20:26:10,203 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@72d26ba4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:26:10, skipping insertion in model container [2025-03-17 20:26:10,203 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:10,203 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 17.03 08:26:01" (2/3) ... [2025-03-17 20:26:10,204 INFO L204 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@72d26ba4 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 17.03 08:26:10, skipping insertion in model container [2025-03-17 20:26:10,204 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2025-03-17 20:26:10,204 INFO L184 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.icfgbuilder CFG 17.03 08:26:10" (3/3) ... [2025-03-17 20:26:10,205 INFO L363 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product11.cil.c [2025-03-17 20:26:10,304 INFO L306 stractBuchiCegarLoop]: Interprodecural is true [2025-03-17 20:26:10,304 INFO L307 stractBuchiCegarLoop]: Hoare is None [2025-03-17 20:26:10,304 INFO L308 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2025-03-17 20:26:10,304 INFO L309 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2025-03-17 20:26:10,304 INFO L310 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2025-03-17 20:26:10,304 INFO L311 stractBuchiCegarLoop]: Difference is false [2025-03-17 20:26:10,304 INFO L312 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2025-03-17 20:26:10,305 INFO L316 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2025-03-17 20:26:10,323 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6148 states, 6147 states have (on average 1.8804294777940458) internal successors, (11559), 6147 states have internal predecessors, (11559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:10,438 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1246 [2025-03-17 20:26:10,439 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:10,439 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:10,455 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,456 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,456 INFO L338 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2025-03-17 20:26:10,470 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6148 states, 6147 states have (on average 1.8804294777940458) internal successors, (11559), 6147 states have internal predecessors, (11559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:10,533 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1246 [2025-03-17 20:26:10,534 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:10,534 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:10,541 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,542 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:10,550 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" [2025-03-17 20:26:10,556 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" [2025-03-17 20:26:10,560 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:10,560 INFO L85 PathProgramCache]: Analyzing trace with hash 250776255, now seen corresponding path program 1 times [2025-03-17 20:26:10,565 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:10,565 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1516361399] [2025-03-17 20:26:10,565 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:10,566 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:10,688 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 149 statements into 1 equivalence classes. [2025-03-17 20:26:10,753 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 149 of 149 statements. [2025-03-17 20:26:10,754 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:10,754 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:11,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:11,131 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:11,131 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1516361399] [2025-03-17 20:26:11,132 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1516361399] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:11,132 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:11,132 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:11,133 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [38883770] [2025-03-17 20:26:11,133 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:11,136 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:11,138 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:11,138 INFO L85 PathProgramCache]: Analyzing trace with hash 679725288, now seen corresponding path program 1 times [2025-03-17 20:26:11,138 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:11,138 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [155928476] [2025-03-17 20:26:11,138 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:11,138 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:11,156 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:11,167 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:11,171 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:11,171 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:11,274 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:11,275 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:11,275 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [155928476] [2025-03-17 20:26:11,275 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [155928476] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:11,275 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:11,275 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2025-03-17 20:26:11,275 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1589605086] [2025-03-17 20:26:11,275 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:11,276 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:11,277 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:11,295 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2025-03-17 20:26:11,296 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2025-03-17 20:26:11,307 INFO L87 Difference]: Start difference. First operand has 6148 states, 6147 states have (on average 1.8804294777940458) internal successors, (11559), 6147 states have internal predecessors, (11559), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.142857142857143) internal successors, (43), 7 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:15,803 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:15,804 INFO L93 Difference]: Finished difference Result 20538 states and 38418 transitions. [2025-03-17 20:26:15,805 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20538 states and 38418 transitions. [2025-03-17 20:26:15,962 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4615 [2025-03-17 20:26:16,103 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20538 states to 20518 states and 38389 transitions. [2025-03-17 20:26:16,104 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20518 [2025-03-17 20:26:16,131 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20518 [2025-03-17 20:26:16,132 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20518 states and 38389 transitions. [2025-03-17 20:26:16,177 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:16,177 INFO L218 hiAutomatonCegarLoop]: Abstraction has 20518 states and 38389 transitions. [2025-03-17 20:26:16,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20518 states and 38389 transitions. [2025-03-17 20:26:16,551 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20518 to 20446. [2025-03-17 20:26:16,586 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20446 states, 20446 states have (on average 1.8717108480876454) internal successors, (38269), 20445 states have internal predecessors, (38269), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:16,752 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20446 states to 20446 states and 38269 transitions. [2025-03-17 20:26:16,754 INFO L240 hiAutomatonCegarLoop]: Abstraction has 20446 states and 38269 transitions. [2025-03-17 20:26:16,757 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2025-03-17 20:26:16,759 INFO L432 stractBuchiCegarLoop]: Abstraction has 20446 states and 38269 transitions. [2025-03-17 20:26:16,759 INFO L338 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2025-03-17 20:26:16,759 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20446 states and 38269 transitions. [2025-03-17 20:26:16,808 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4597 [2025-03-17 20:26:16,808 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:16,808 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:16,812 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:16,812 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:16,812 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" [2025-03-17 20:26:16,813 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" [2025-03-17 20:26:16,814 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:16,814 INFO L85 PathProgramCache]: Analyzing trace with hash 250776255, now seen corresponding path program 2 times [2025-03-17 20:26:16,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:16,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1980880829] [2025-03-17 20:26:16,814 INFO L95 rtionOrderModulation]: Changing assertion order to OUTSIDE_LOOP_FIRST1 [2025-03-17 20:26:16,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:16,850 INFO L108 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 partitioned 149 statements into 1 equivalence classes. [2025-03-17 20:26:16,861 INFO L111 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) and asserted 149 of 149 statements. [2025-03-17 20:26:16,861 INFO L114 AnnotateAndAsserter]: Assert order OUTSIDE_LOOP_FIRST1 issued 1 check-sat command(s) [2025-03-17 20:26:16,861 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:17,022 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:17,022 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:17,022 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1980880829] [2025-03-17 20:26:17,023 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1980880829] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:17,023 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:17,023 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:17,023 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1358274584] [2025-03-17 20:26:17,023 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:17,024 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:17,024 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:17,025 INFO L85 PathProgramCache]: Analyzing trace with hash 1567228969, now seen corresponding path program 1 times [2025-03-17 20:26:17,025 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:17,025 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [635052220] [2025-03-17 20:26:17,025 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:17,025 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:17,037 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:17,045 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:17,048 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:17,048 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:17,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:17,095 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:17,095 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [635052220] [2025-03-17 20:26:17,095 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [635052220] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:17,095 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:17,095 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:17,095 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1575965293] [2025-03-17 20:26:17,095 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:17,096 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:17,096 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:17,096 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:17,096 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:17,096 INFO L87 Difference]: Start difference. First operand 20446 states and 38269 transitions. cyclomatic complexity: 17826 Second operand has 5 states, 5 states have (on average 8.6) internal successors, (43), 5 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:17,733 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:17,734 INFO L93 Difference]: Finished difference Result 33457 states and 62548 transitions. [2025-03-17 20:26:17,734 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33457 states and 62548 transitions. [2025-03-17 20:26:17,865 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7936 [2025-03-17 20:26:17,986 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33457 states to 33457 states and 62548 transitions. [2025-03-17 20:26:17,987 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33457 [2025-03-17 20:26:18,019 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33457 [2025-03-17 20:26:18,019 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33457 states and 62548 transitions. [2025-03-17 20:26:18,063 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:18,063 INFO L218 hiAutomatonCegarLoop]: Abstraction has 33457 states and 62548 transitions. [2025-03-17 20:26:18,096 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33457 states and 62548 transitions. [2025-03-17 20:26:18,628 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33457 to 33425. [2025-03-17 20:26:18,728 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 33425 states, 33425 states have (on average 1.8698578908002992) internal successors, (62500), 33424 states have internal predecessors, (62500), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:18,896 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 33425 states to 33425 states and 62500 transitions. [2025-03-17 20:26:18,896 INFO L240 hiAutomatonCegarLoop]: Abstraction has 33425 states and 62500 transitions. [2025-03-17 20:26:18,899 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2025-03-17 20:26:18,901 INFO L432 stractBuchiCegarLoop]: Abstraction has 33425 states and 62500 transitions. [2025-03-17 20:26:18,901 INFO L338 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2025-03-17 20:26:18,901 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 33425 states and 62500 transitions. [2025-03-17 20:26:18,965 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7928 [2025-03-17 20:26:18,965 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:18,965 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:18,969 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:18,970 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:18,970 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" [2025-03-17 20:26:18,971 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" [2025-03-17 20:26:18,973 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:18,973 INFO L85 PathProgramCache]: Analyzing trace with hash 1942118208, now seen corresponding path program 1 times [2025-03-17 20:26:18,973 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:18,973 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1045483948] [2025-03-17 20:26:18,973 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:18,973 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:19,006 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 149 statements into 1 equivalence classes. [2025-03-17 20:26:19,013 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 149 of 149 statements. [2025-03-17 20:26:19,018 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:19,018 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:19,261 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:19,262 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:19,262 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1045483948] [2025-03-17 20:26:19,262 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1045483948] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:19,262 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:19,262 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:19,263 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1554064092] [2025-03-17 20:26:19,263 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:19,263 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:19,263 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:19,264 INFO L85 PathProgramCache]: Analyzing trace with hash 1595858120, now seen corresponding path program 1 times [2025-03-17 20:26:19,264 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:19,264 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [75452729] [2025-03-17 20:26:19,264 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:19,264 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:19,278 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 43 statements into 1 equivalence classes. [2025-03-17 20:26:19,281 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 43 of 43 statements. [2025-03-17 20:26:19,282 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:19,282 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:19,305 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:19,306 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:19,306 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [75452729] [2025-03-17 20:26:19,306 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [75452729] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:19,306 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:19,306 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:19,306 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1288917965] [2025-03-17 20:26:19,306 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:19,306 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:19,307 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:19,307 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2025-03-17 20:26:19,307 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2025-03-17 20:26:19,308 INFO L87 Difference]: Start difference. First operand 33425 states and 62500 transitions. cyclomatic complexity: 29078 Second operand has 3 states, 3 states have (on average 14.333333333333334) internal successors, (43), 3 states have internal predecessors, (43), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:19,654 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:19,655 INFO L93 Difference]: Finished difference Result 52668 states and 98446 transitions. [2025-03-17 20:26:19,655 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52668 states and 98446 transitions. [2025-03-17 20:26:19,907 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12324 [2025-03-17 20:26:20,120 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52668 states to 52668 states and 98446 transitions. [2025-03-17 20:26:20,120 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52668 [2025-03-17 20:26:20,196 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52668 [2025-03-17 20:26:20,196 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52668 states and 98446 transitions. [2025-03-17 20:26:20,257 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:20,258 INFO L218 hiAutomatonCegarLoop]: Abstraction has 52668 states and 98446 transitions. [2025-03-17 20:26:20,298 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52668 states and 98446 transitions. [2025-03-17 20:26:21,136 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52668 to 51978. [2025-03-17 20:26:21,209 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 51978 states, 51978 states have (on average 1.8701950825349187) internal successors, (97209), 51977 states have internal predecessors, (97209), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:21,291 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 51978 states to 51978 states and 97209 transitions. [2025-03-17 20:26:21,292 INFO L240 hiAutomatonCegarLoop]: Abstraction has 51978 states and 97209 transitions. [2025-03-17 20:26:21,292 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2025-03-17 20:26:21,294 INFO L432 stractBuchiCegarLoop]: Abstraction has 51978 states and 97209 transitions. [2025-03-17 20:26:21,294 INFO L338 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2025-03-17 20:26:21,294 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 51978 states and 97209 transitions. [2025-03-17 20:26:21,420 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12004 [2025-03-17 20:26:21,420 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:21,420 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:21,425 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:21,425 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:21,426 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" [2025-03-17 20:26:21,426 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" [2025-03-17 20:26:21,427 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:21,427 INFO L85 PathProgramCache]: Analyzing trace with hash 644237878, now seen corresponding path program 1 times [2025-03-17 20:26:21,427 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:21,427 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1364269305] [2025-03-17 20:26:21,427 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:21,428 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:21,452 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 153 statements into 1 equivalence classes. [2025-03-17 20:26:21,459 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 153 of 153 statements. [2025-03-17 20:26:21,459 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:21,459 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:21,789 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:21,790 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:21,790 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1364269305] [2025-03-17 20:26:21,790 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1364269305] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:21,790 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:21,790 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:21,790 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1137526787] [2025-03-17 20:26:21,790 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:21,790 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:21,791 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:21,792 INFO L85 PathProgramCache]: Analyzing trace with hash -1308021822, now seen corresponding path program 1 times [2025-03-17 20:26:21,792 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:21,792 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1267249872] [2025-03-17 20:26:21,792 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:21,792 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:21,803 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 44 statements into 1 equivalence classes. [2025-03-17 20:26:21,806 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 44 of 44 statements. [2025-03-17 20:26:21,807 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:21,807 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:22,258 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:22,258 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:22,258 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1267249872] [2025-03-17 20:26:22,258 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1267249872] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:22,258 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:22,258 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2025-03-17 20:26:22,258 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [330230119] [2025-03-17 20:26:22,258 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:22,258 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:22,258 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:22,259 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2025-03-17 20:26:22,259 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=38, Invalid=234, Unknown=0, NotChecked=0, Total=272 [2025-03-17 20:26:22,259 INFO L87 Difference]: Start difference. First operand 51978 states and 97209 transitions. cyclomatic complexity: 45234 Second operand has 17 states, 17 states have (on average 2.588235294117647) internal successors, (44), 17 states have internal predecessors, (44), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:33,061 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:33,062 INFO L93 Difference]: Finished difference Result 78755 states and 146249 transitions. [2025-03-17 20:26:33,062 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 78755 states and 146249 transitions. [2025-03-17 20:26:33,344 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18088 [2025-03-17 20:26:33,563 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 78755 states to 78755 states and 146249 transitions. [2025-03-17 20:26:33,565 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 78755 [2025-03-17 20:26:33,629 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 78755 [2025-03-17 20:26:33,630 INFO L73 IsDeterministic]: Start isDeterministic. Operand 78755 states and 146249 transitions. [2025-03-17 20:26:33,685 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2025-03-17 20:26:33,685 INFO L218 hiAutomatonCegarLoop]: Abstraction has 78755 states and 146249 transitions. [2025-03-17 20:26:33,747 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 78755 states and 146249 transitions. [2025-03-17 20:26:34,379 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 78755 to 78462. [2025-03-17 20:26:34,856 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78462 states, 78462 states have (on average 1.85879788942418) internal successors, (145845), 78461 states have internal predecessors, (145845), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:35,039 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78462 states to 78462 states and 145845 transitions. [2025-03-17 20:26:35,039 INFO L240 hiAutomatonCegarLoop]: Abstraction has 78462 states and 145845 transitions. [2025-03-17 20:26:35,044 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 28 states. [2025-03-17 20:26:35,045 INFO L432 stractBuchiCegarLoop]: Abstraction has 78462 states and 145845 transitions. [2025-03-17 20:26:35,045 INFO L338 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2025-03-17 20:26:35,045 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78462 states and 145845 transitions. [2025-03-17 20:26:35,424 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 17994 [2025-03-17 20:26:35,424 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:35,424 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:35,429 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:35,429 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:35,429 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1;" "assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~23#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;" "stopRequestedAtCurrentFloor_#t~ret88#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1;" "continueInDirection_#t~ret82#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret82#1;havoc continueInDirection_#t~ret82#1;" "assume !(0 != continueInDirection_~tmp~21#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" [2025-03-17 20:26:35,430 INFO L754 eck$LassoCheckResult]: Loop: "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1;" "assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" [2025-03-17 20:26:35,430 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:35,430 INFO L85 PathProgramCache]: Analyzing trace with hash 1510565243, now seen corresponding path program 1 times [2025-03-17 20:26:35,431 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:35,431 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [403602222] [2025-03-17 20:26:35,431 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:35,431 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:35,454 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 155 statements into 1 equivalence classes. [2025-03-17 20:26:35,458 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 155 of 155 statements. [2025-03-17 20:26:35,458 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:35,458 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:35,569 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:35,570 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:35,570 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [403602222] [2025-03-17 20:26:35,570 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [403602222] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:35,570 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:35,570 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2025-03-17 20:26:35,570 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [357748628] [2025-03-17 20:26:35,570 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:35,571 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:35,571 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:35,571 INFO L85 PathProgramCache]: Analyzing trace with hash 304598814, now seen corresponding path program 1 times [2025-03-17 20:26:35,571 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:35,571 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1626291382] [2025-03-17 20:26:35,571 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:35,571 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:35,583 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:35,587 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:35,588 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:35,589 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-17 20:26:35,589 INFO L348 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2025-03-17 20:26:35,592 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:35,598 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:35,598 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:35,598 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is sat [2025-03-17 20:26:35,631 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2025-03-17 20:26:36,392 INFO L204 LassoAnalysis]: Preferences: [2025-03-17 20:26:36,393 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-17 20:26:36,394 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-17 20:26:36,394 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-17 20:26:36,394 INFO L128 ssoRankerPreferences]: Use exernal solver: true [2025-03-17 20:26:36,394 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:36,394 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-17 20:26:36,394 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-17 20:26:36,394 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2025-03-17 20:26:36,394 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-17 20:26:36,395 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-17 20:26:36,423 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,430 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,432 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,434 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,437 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,440 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,442 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,444 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,446 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,448 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,450 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,452 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,454 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,459 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,461 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,463 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,465 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,467 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,470 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,472 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,474 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,476 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,479 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,480 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,482 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,484 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,491 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,493 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,495 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,496 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,498 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,500 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,502 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,504 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,505 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,506 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,508 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,509 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,511 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,513 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,514 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,516 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,518 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,520 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,522 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,523 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,525 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,527 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,529 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,531 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,532 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,534 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,537 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,539 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,541 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,542 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,544 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,546 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,550 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,553 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,554 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,556 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,559 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,562 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,565 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,568 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,569 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,571 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,573 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,574 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,576 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,578 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,580 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,581 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,584 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,585 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,587 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,589 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,591 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,593 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,595 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,597 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,599 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,602 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,604 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,606 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,610 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,612 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,614 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,617 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,619 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,620 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,622 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,624 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,626 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,628 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,634 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,636 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,639 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,640 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,641 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,643 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,645 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,648 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,650 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,651 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,652 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,654 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,656 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,657 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,658 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,660 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,661 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,662 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,664 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,665 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,667 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,669 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,671 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,672 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,674 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,676 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,678 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,679 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:36,940 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-17 20:26:36,941 INFO L365 LassoAnalysis]: Checking for nontermination... [2025-03-17 20:26:36,942 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:36,942 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:36,944 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:36,946 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2025-03-17 20:26:36,949 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:36,949 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:36,962 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:36,963 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~23#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:36,968 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2025-03-17 20:26:36,968 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:36,968 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:36,970 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:36,971 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2025-03-17 20:26:36,972 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:36,972 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:36,983 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:36,983 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:36,989 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2025-03-17 20:26:36,989 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:36,989 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:36,991 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:36,991 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2025-03-17 20:26:36,992 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:36,992 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,003 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,003 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,008 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2025-03-17 20:26:37,008 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,008 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,010 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,010 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2025-03-17 20:26:37,011 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,011 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,022 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,022 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,027 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2025-03-17 20:26:37,028 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,028 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,029 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,030 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2025-03-17 20:26:37,031 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,031 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,042 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,043 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,048 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2025-03-17 20:26:37,048 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,049 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,051 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,052 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2025-03-17 20:26:37,053 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,053 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,063 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,064 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret104#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret104#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,070 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:37,070 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,070 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,072 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,073 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2025-03-17 20:26:37,074 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,075 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,087 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,087 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret85#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret85#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,092 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2025-03-17 20:26:37,093 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,093 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,094 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,095 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2025-03-17 20:26:37,096 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,096 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,108 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,108 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,113 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Ended with exit code 0 [2025-03-17 20:26:37,114 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,114 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,115 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,116 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2025-03-17 20:26:37,117 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,117 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,127 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,127 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,133 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2025-03-17 20:26:37,133 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,133 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,135 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,135 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2025-03-17 20:26:37,137 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,137 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,147 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,147 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_~tmp~18#1=0} Honda state: {ULTIMATE.start_isIdle_~tmp~18#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,152 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2025-03-17 20:26:37,153 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,153 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,154 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,156 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2025-03-17 20:26:37,156 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,156 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,168 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,168 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,174 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2025-03-17 20:26:37,174 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,175 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,176 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,178 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2025-03-17 20:26:37,179 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,179 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,190 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,190 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,196 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:37,197 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,197 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,199 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,199 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2025-03-17 20:26:37,200 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,201 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,211 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,211 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~executiveFloor~0=0} Honda state: {~executiveFloor~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,217 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Ended with exit code 0 [2025-03-17 20:26:37,217 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,217 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,219 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,219 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2025-03-17 20:26:37,220 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,220 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,231 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,231 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,236 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2025-03-17 20:26:37,236 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,236 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,238 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,239 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2025-03-17 20:26:37,239 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,239 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,250 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,250 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,255 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Ended with exit code 0 [2025-03-17 20:26:37,256 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,256 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,258 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,259 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2025-03-17 20:26:37,260 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,260 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,274 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,274 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret43#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,284 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Ended with exit code 0 [2025-03-17 20:26:37,284 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,284 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,286 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,288 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2025-03-17 20:26:37,290 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,290 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,300 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,300 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,306 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Ended with exit code 0 [2025-03-17 20:26:37,307 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,307 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,308 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,310 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2025-03-17 20:26:37,312 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,312 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,324 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,324 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret86#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret86#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,331 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Ended with exit code 0 [2025-03-17 20:26:37,331 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,331 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,332 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,333 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2025-03-17 20:26:37,337 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,337 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,348 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,348 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~10#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,354 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Ended with exit code 0 [2025-03-17 20:26:37,354 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,354 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,356 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,357 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2025-03-17 20:26:37,357 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,357 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,367 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,368 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,373 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Ended with exit code 0 [2025-03-17 20:26:37,374 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,374 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,375 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,376 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2025-03-17 20:26:37,377 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,377 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,387 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,387 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,393 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2025-03-17 20:26:37,393 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,393 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,395 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,418 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,418 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,421 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2025-03-17 20:26:37,435 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,436 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,441 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Ended with exit code 0 [2025-03-17 20:26:37,442 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,442 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,443 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,444 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2025-03-17 20:26:37,445 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,445 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,456 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,456 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,461 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2025-03-17 20:26:37,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,462 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,463 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,464 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2025-03-17 20:26:37,465 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,465 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,476 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,476 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_getCurrentHeading_~retValue_acc~12#1=0} Honda state: {ULTIMATE.start_getCurrentHeading_~retValue_acc~12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,481 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2025-03-17 20:26:37,482 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,482 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,483 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,484 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2025-03-17 20:26:37,485 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,485 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,495 INFO L398 LassoAnalysis]: Proved nontermination for one component. [2025-03-17 20:26:37,496 INFO L401 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2025-03-17 20:26:37,501 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:37,501 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,502 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,503 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,504 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2025-03-17 20:26:37,505 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2025-03-17 20:26:37,505 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,522 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Ended with exit code 0 [2025-03-17 20:26:37,522 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,522 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:37,524 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:37,524 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2025-03-17 20:26:37,525 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2025-03-17 20:26:37,525 INFO L160 nArgumentSynthesizer]: Using integer mode. [2025-03-17 20:26:37,547 INFO L405 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2025-03-17 20:26:37,550 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2025-03-17 20:26:37,551 INFO L204 LassoAnalysis]: Preferences: [2025-03-17 20:26:37,551 INFO L125 ssoRankerPreferences]: Compute integeral hull: false [2025-03-17 20:26:37,551 INFO L126 ssoRankerPreferences]: Enable LassoPartitioneer: true [2025-03-17 20:26:37,551 INFO L127 ssoRankerPreferences]: Term annotations enabled: false [2025-03-17 20:26:37,551 INFO L128 ssoRankerPreferences]: Use exernal solver: false [2025-03-17 20:26:37,551 INFO L129 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:37,551 INFO L130 ssoRankerPreferences]: Dump SMT script to file: false [2025-03-17 20:26:37,551 INFO L131 ssoRankerPreferences]: Path of dumped script: [2025-03-17 20:26:37,551 INFO L132 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration5_Loop [2025-03-17 20:26:37,551 INFO L133 ssoRankerPreferences]: MapElimAlgo: Frank [2025-03-17 20:26:37,551 INFO L241 LassoAnalysis]: Starting lasso preprocessing... [2025-03-17 20:26:37,554 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,556 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,557 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,559 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,560 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,562 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,563 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,565 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,566 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,568 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,569 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,571 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,572 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,573 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,575 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,577 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,578 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,580 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,581 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,583 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,584 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,585 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,587 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,588 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,592 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,593 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,594 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,595 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,597 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,599 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,600 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,601 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,602 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,604 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,605 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,609 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,610 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,612 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,613 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,614 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,616 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,617 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,619 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,620 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,621 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,623 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,624 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,626 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,627 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,628 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,630 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,631 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,633 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,634 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,636 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,637 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,638 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,640 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,642 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,643 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,644 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,646 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,647 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,648 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,650 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,651 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,653 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,654 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,658 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,660 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,665 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,667 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,668 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,669 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,671 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,672 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,673 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,675 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,676 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,678 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,679 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,681 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,683 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,684 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,685 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,687 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,688 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,689 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,691 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,692 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,693 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,694 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,696 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,697 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,698 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,699 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,702 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,703 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,705 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,706 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,707 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,708 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,709 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,712 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,713 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,714 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,715 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,716 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,717 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,718 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,720 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,721 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,722 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,723 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,727 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,728 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,730 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,731 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,732 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,733 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,737 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,738 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,740 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,741 INFO L118 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2025-03-17 20:26:37,997 INFO L259 LassoAnalysis]: Preprocessing complete. [2025-03-17 20:26:37,999 INFO L451 LassoAnalysis]: Using template 'affine'. [2025-03-17 20:26:38,000 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,000 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,002 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,004 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2025-03-17 20:26:38,005 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,016 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,016 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,017 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,017 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,017 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,020 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,020 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,021 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,027 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,027 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,028 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,029 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,031 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2025-03-17 20:26:38,032 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,042 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,042 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,042 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,042 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,042 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,043 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,043 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,044 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,050 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,051 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,051 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,053 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,054 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2025-03-17 20:26:38,055 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,066 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,066 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,066 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,066 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,066 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,066 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,066 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,068 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,073 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,075 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,075 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,077 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,080 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2025-03-17 20:26:38,080 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,090 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,090 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,090 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,090 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,090 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,091 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,091 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,094 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,100 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,101 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,101 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,103 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,104 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2025-03-17 20:26:38,108 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,118 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,118 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,118 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,118 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,118 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,119 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,119 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,120 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,126 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,126 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,127 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,128 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,130 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2025-03-17 20:26:38,131 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,141 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,142 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,142 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,142 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,142 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,142 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,142 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,143 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,149 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2025-03-17 20:26:38,149 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,149 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,151 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,152 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2025-03-17 20:26:38,153 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,162 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,163 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,163 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,163 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,163 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,163 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,163 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,164 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,169 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Ended with exit code 0 [2025-03-17 20:26:38,169 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,169 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,171 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,172 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2025-03-17 20:26:38,173 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,183 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,183 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,183 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,183 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,183 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,184 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,184 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,185 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,190 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2025-03-17 20:26:38,190 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,190 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,192 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,192 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2025-03-17 20:26:38,193 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,203 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,203 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,203 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,203 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,203 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,204 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,204 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,205 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,211 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Ended with exit code 0 [2025-03-17 20:26:38,211 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,211 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,213 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,213 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2025-03-17 20:26:38,214 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,224 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,224 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,224 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,224 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,224 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,226 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,226 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,227 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,232 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Ended with exit code 0 [2025-03-17 20:26:38,233 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,233 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,234 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,235 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2025-03-17 20:26:38,236 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,246 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,247 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,247 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,247 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,247 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,247 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,247 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,248 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,254 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2025-03-17 20:26:38,254 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,254 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,256 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,257 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2025-03-17 20:26:38,258 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,267 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,267 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,267 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,267 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,267 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,268 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,268 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,269 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,275 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Ended with exit code 0 [2025-03-17 20:26:38,275 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,275 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,277 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,278 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2025-03-17 20:26:38,279 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,289 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,289 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,289 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,289 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,289 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,290 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,290 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,291 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,296 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Ended with exit code 0 [2025-03-17 20:26:38,296 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,297 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,298 INFO L229 MonitoredProcess]: Starting monitored process 42 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,299 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Waiting until timeout for monitored process [2025-03-17 20:26:38,300 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,309 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,309 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,309 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,309 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,309 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,310 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,310 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,311 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,316 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (42)] Ended with exit code 0 [2025-03-17 20:26:38,316 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,316 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,318 INFO L229 MonitoredProcess]: Starting monitored process 43 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,319 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Waiting until timeout for monitored process [2025-03-17 20:26:38,320 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,329 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,329 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,329 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,329 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,329 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,330 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,330 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,330 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,336 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (43)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:38,336 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,336 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,338 INFO L229 MonitoredProcess]: Starting monitored process 44 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,338 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Waiting until timeout for monitored process [2025-03-17 20:26:38,341 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,350 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,350 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,351 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,351 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,351 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,351 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,351 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,353 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,359 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (44)] Ended with exit code 0 [2025-03-17 20:26:38,359 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,359 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,361 INFO L229 MonitoredProcess]: Starting monitored process 45 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,361 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Waiting until timeout for monitored process [2025-03-17 20:26:38,362 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,372 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,372 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,372 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,372 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,372 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,373 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,373 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,374 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,379 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (45)] Ended with exit code 0 [2025-03-17 20:26:38,380 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,380 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,381 INFO L229 MonitoredProcess]: Starting monitored process 46 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,382 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Waiting until timeout for monitored process [2025-03-17 20:26:38,383 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,393 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,393 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,393 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,393 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,393 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,393 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,393 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,395 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,400 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (46)] Ended with exit code 0 [2025-03-17 20:26:38,400 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,400 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,402 INFO L229 MonitoredProcess]: Starting monitored process 47 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,403 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Waiting until timeout for monitored process [2025-03-17 20:26:38,403 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,413 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,413 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,413 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,413 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,413 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,413 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,413 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,414 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,419 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (47)] Ended with exit code 0 [2025-03-17 20:26:38,419 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,419 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,420 INFO L229 MonitoredProcess]: Starting monitored process 48 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,422 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Waiting until timeout for monitored process [2025-03-17 20:26:38,423 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,432 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,433 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,433 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,433 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,433 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,433 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,433 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,434 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,438 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (48)] Ended with exit code 0 [2025-03-17 20:26:38,439 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,439 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,440 INFO L229 MonitoredProcess]: Starting monitored process 49 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,441 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Waiting until timeout for monitored process [2025-03-17 20:26:38,441 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,451 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,451 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,451 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,451 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,452 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,452 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,452 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,453 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,458 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (49)] Ended with exit code 0 [2025-03-17 20:26:38,458 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,459 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,460 INFO L229 MonitoredProcess]: Starting monitored process 50 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,461 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Waiting until timeout for monitored process [2025-03-17 20:26:38,462 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,472 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,472 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,472 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,472 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,472 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,473 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,473 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,474 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,479 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (50)] Ended with exit code 0 [2025-03-17 20:26:38,479 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,480 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,481 INFO L229 MonitoredProcess]: Starting monitored process 51 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,482 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Waiting until timeout for monitored process [2025-03-17 20:26:38,483 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,492 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,492 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,492 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,492 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,492 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,493 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,493 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,494 INFO L488 LassoAnalysis]: Proving termination failed for this template and these settings. [2025-03-17 20:26:38,498 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (51)] Ended with exit code 0 [2025-03-17 20:26:38,499 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,499 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,500 INFO L229 MonitoredProcess]: Starting monitored process 52 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,501 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Waiting until timeout for monitored process [2025-03-17 20:26:38,502 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2025-03-17 20:26:38,512 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2025-03-17 20:26:38,512 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2025-03-17 20:26:38,512 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2025-03-17 20:26:38,512 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2025-03-17 20:26:38,512 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2025-03-17 20:26:38,513 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2025-03-17 20:26:38,513 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2025-03-17 20:26:38,514 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2025-03-17 20:26:38,517 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2025-03-17 20:26:38,519 INFO L444 ModelExtractionUtils]: 0 out of 3 variables were initially zero. Simplification set additionally 1 variables to zero. [2025-03-17 20:26:38,520 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2025-03-17 20:26:38,520 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2025-03-17 20:26:38,522 INFO L229 MonitoredProcess]: Starting monitored process 53 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2025-03-17 20:26:38,523 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Waiting until timeout for monitored process [2025-03-17 20:26:38,524 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2025-03-17 20:26:38,524 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2025-03-17 20:26:38,524 INFO L474 LassoAnalysis]: Proved termination. [2025-03-17 20:26:38,524 INFO L476 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2025-03-17 20:26:38,530 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (52)] Ended with exit code 0 [2025-03-17 20:26:38,531 INFO L156 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2025-03-17 20:26:38,552 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:38,624 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 155 statements into 1 equivalence classes. [2025-03-17 20:26:38,712 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 155 of 155 statements. [2025-03-17 20:26:38,712 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:38,712 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:38,718 INFO L256 TraceCheckSpWp]: Trace formula consists of 1127 conjuncts, 2 conjuncts are in the unsatisfiable core [2025-03-17 20:26:38,723 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-17 20:26:38,911 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 45 statements into 1 equivalence classes. [2025-03-17 20:26:38,925 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 45 of 45 statements. [2025-03-17 20:26:38,925 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:38,925 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:38,927 INFO L256 TraceCheckSpWp]: Trace formula consists of 179 conjuncts, 8 conjuncts are in the unsatisfiable core [2025-03-17 20:26:38,929 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2025-03-17 20:26:39,078 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:39,082 INFO L141 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2025-03-17 20:26:39,084 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 78462 states and 145845 transitions. cyclomatic complexity: 67387 Second operand has 7 states, 7 states have (on average 28.571428571428573) internal successors, (200), 7 states have internal predecessors, (200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:40,142 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (53)] Forceful destruction successful, exit code 0 [2025-03-17 20:26:40,761 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 78462 states and 145845 transitions. cyclomatic complexity: 67387. Second operand has 7 states, 7 states have (on average 28.571428571428573) internal successors, (200), 7 states have internal predecessors, (200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 143705 states and 266427 transitions. Complement of second has 16 states. [2025-03-17 20:26:40,763 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 9 states 1 stem states 6 non-accepting loop states 1 accepting loop states [2025-03-17 20:26:40,764 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 28.571428571428573) internal successors, (200), 7 states have internal predecessors, (200), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:40,775 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9 states to 9 states and 15781 transitions. [2025-03-17 20:26:40,779 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15781 transitions. Stem has 155 letters. Loop has 45 letters. [2025-03-17 20:26:40,781 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-17 20:26:40,782 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15781 transitions. Stem has 200 letters. Loop has 45 letters. [2025-03-17 20:26:40,783 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-17 20:26:40,783 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 9 states and 15781 transitions. Stem has 155 letters. Loop has 90 letters. [2025-03-17 20:26:40,784 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2025-03-17 20:26:40,785 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 143705 states and 266427 transitions. [2025-03-17 20:26:41,536 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 38949 [2025-03-17 20:26:42,200 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 143705 states to 128150 states and 237531 transitions. [2025-03-17 20:26:42,200 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 101928 [2025-03-17 20:26:42,283 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 101948 [2025-03-17 20:26:42,283 INFO L73 IsDeterministic]: Start isDeterministic. Operand 128150 states and 237531 transitions. [2025-03-17 20:26:42,315 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-17 20:26:42,315 INFO L218 hiAutomatonCegarLoop]: Abstraction has 128150 states and 237531 transitions. [2025-03-17 20:26:42,394 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 128150 states and 237531 transitions. [2025-03-17 20:26:43,385 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 128150 to 125693. [2025-03-17 20:26:43,487 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125693 states, 125693 states have (on average 1.8566029930067705) internal successors, (233362), 125692 states have internal predecessors, (233362), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:43,690 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125693 states to 125693 states and 233362 transitions. [2025-03-17 20:26:43,690 INFO L240 hiAutomatonCegarLoop]: Abstraction has 125693 states and 233362 transitions. [2025-03-17 20:26:43,690 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:43,690 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2025-03-17 20:26:43,690 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2025-03-17 20:26:43,690 INFO L87 Difference]: Start difference. First operand 125693 states and 233362 transitions. Second operand has 4 states, 4 states have (on average 38.75) internal successors, (155), 4 states have internal predecessors, (155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:44,513 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:44,513 INFO L93 Difference]: Finished difference Result 125791 states and 233460 transitions. [2025-03-17 20:26:44,513 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 125791 states and 233460 transitions. [2025-03-17 20:26:45,292 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 37224 [2025-03-17 20:26:45,637 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 125791 states to 125791 states and 233460 transitions. [2025-03-17 20:26:45,638 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 99955 [2025-03-17 20:26:45,699 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 99955 [2025-03-17 20:26:45,699 INFO L73 IsDeterministic]: Start isDeterministic. Operand 125791 states and 233460 transitions. [2025-03-17 20:26:45,730 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-17 20:26:45,730 INFO L218 hiAutomatonCegarLoop]: Abstraction has 125791 states and 233460 transitions. [2025-03-17 20:26:45,799 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 125791 states and 233460 transitions. [2025-03-17 20:26:46,977 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 125791 to 125777. [2025-03-17 20:26:47,076 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 125777 states, 125777 states have (on average 1.8560309118519285) internal successors, (233446), 125776 states have internal predecessors, (233446), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:47,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 125777 states to 125777 states and 233446 transitions. [2025-03-17 20:26:47,283 INFO L240 hiAutomatonCegarLoop]: Abstraction has 125777 states and 233446 transitions. [2025-03-17 20:26:47,284 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2025-03-17 20:26:47,284 INFO L432 stractBuchiCegarLoop]: Abstraction has 125777 states and 233446 transitions. [2025-03-17 20:26:47,284 INFO L338 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2025-03-17 20:26:47,284 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 125777 states and 233446 transitions. [2025-03-17 20:26:47,550 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 37224 [2025-03-17 20:26:47,551 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:47,551 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:47,553 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:47,556 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:47,556 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1;" "assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~23#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;" "stopRequestedAtCurrentFloor_#t~ret88#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1;" "continueInDirection_#t~ret82#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret82#1;havoc continueInDirection_#t~ret82#1;" "assume !(0 != continueInDirection_~tmp~21#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-17 20:26:47,557 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume !(0 != stopRequestedAtCurrentFloor_~tmp~23#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;" "stopRequestedAtCurrentFloor_#t~ret88#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret88#1;havoc stopRequestedAtCurrentFloor_#t~ret88#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-17 20:26:47,557 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:47,558 INFO L85 PathProgramCache]: Analyzing trace with hash -227306716, now seen corresponding path program 1 times [2025-03-17 20:26:47,558 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:47,558 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [446094078] [2025-03-17 20:26:47,558 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:47,558 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:47,580 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 158 statements into 1 equivalence classes. [2025-03-17 20:26:47,587 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 158 of 158 statements. [2025-03-17 20:26:47,587 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:47,587 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:47,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:47,936 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:47,936 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [446094078] [2025-03-17 20:26:47,937 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [446094078] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:47,937 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:47,937 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:47,937 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1349343895] [2025-03-17 20:26:47,937 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:47,937 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:47,937 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:47,938 INFO L85 PathProgramCache]: Analyzing trace with hash 2083877836, now seen corresponding path program 1 times [2025-03-17 20:26:47,938 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:47,938 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77522399] [2025-03-17 20:26:47,938 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:47,938 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:47,951 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 46 statements into 1 equivalence classes. [2025-03-17 20:26:47,952 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 46 of 46 statements. [2025-03-17 20:26:47,953 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:47,953 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:48,019 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:48,019 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:48,019 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77522399] [2025-03-17 20:26:48,019 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [77522399] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:48,019 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:48,019 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2025-03-17 20:26:48,019 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [346942573] [2025-03-17 20:26:48,019 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:48,020 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:48,020 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:48,020 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2025-03-17 20:26:48,020 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2025-03-17 20:26:48,020 INFO L87 Difference]: Start difference. First operand 125777 states and 233446 transitions. cyclomatic complexity: 107701 Second operand has 8 states, 8 states have (on average 5.75) internal successors, (46), 8 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:51,041 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:51,042 INFO L93 Difference]: Finished difference Result 245928 states and 453526 transitions. [2025-03-17 20:26:51,042 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 245928 states and 453526 transitions. [2025-03-17 20:26:52,107 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 72581 [2025-03-17 20:26:53,030 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 245928 states to 245928 states and 453526 transitions. [2025-03-17 20:26:53,031 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 196029 [2025-03-17 20:26:53,124 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 196029 [2025-03-17 20:26:53,124 INFO L73 IsDeterministic]: Start isDeterministic. Operand 245928 states and 453526 transitions. [2025-03-17 20:26:53,126 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-17 20:26:53,126 INFO L218 hiAutomatonCegarLoop]: Abstraction has 245928 states and 453526 transitions. [2025-03-17 20:26:53,243 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 245928 states and 453526 transitions. [2025-03-17 20:26:55,264 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 245928 to 242788. [2025-03-17 20:26:55,474 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 242788 states, 242788 states have (on average 1.8550587343690792) internal successors, (450386), 242787 states have internal predecessors, (450386), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:55,871 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 242788 states to 242788 states and 450386 transitions. [2025-03-17 20:26:55,871 INFO L240 hiAutomatonCegarLoop]: Abstraction has 242788 states and 450386 transitions. [2025-03-17 20:26:55,871 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2025-03-17 20:26:55,872 INFO L432 stractBuchiCegarLoop]: Abstraction has 242788 states and 450386 transitions. [2025-03-17 20:26:55,872 INFO L338 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2025-03-17 20:26:55,872 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 242788 states and 450386 transitions. [2025-03-17 20:26:56,807 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 71825 [2025-03-17 20:26:56,807 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2025-03-17 20:26:56,807 INFO L119 BuchiIsEmpty]: Starting construction of run [2025-03-17 20:26:56,809 INFO L148 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:56,809 INFO L149 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2025-03-17 20:26:56,809 INFO L752 eck$LassoCheckResult]: Stem: "assume { :begin_inline_ULTIMATE.init } true;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int#0(48, 1, 0, 1);call write~init~int#0(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int#5(91, 17, 0, 1);call write~init~int#5(95, 17, 1, 1);call write~init~int#5(93, 17, 2, 1);call write~init~int#5(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int#6(91, 18, 0, 1);call write~init~int#6(93, 18, 1, 1);call write~init~int#6(32, 18, 2, 1);call write~init~int#6(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int#7(32, 19, 0, 1);call write~init~int#7(97, 19, 1, 1);call write~init~int#7(116, 19, 2, 1);call write~init~int#7(32, 19, 3, 1);call write~init~int#7(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int#8(37, 20, 0, 1);call write~init~int#8(105, 20, 1, 1);call write~init~int#8(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int#9(117, 22, 0, 1);call write~init~int#9(112, 22, 1, 1);call write~init~int#9(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int#10(100, 23, 0, 1);call write~init~int#10(111, 23, 1, 1);call write~init~int#10(119, 23, 2, 1);call write~init~int#10(110, 23, 3, 1);call write~init~int#10(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int#11(32, 24, 0, 1);call write~init~int#11(73, 24, 1, 1);call write~init~int#11(76, 24, 2, 1);call write~init~int#11(95, 24, 3, 1);call write~init~int#11(112, 24, 4, 1);call write~init~int#11(58, 24, 5, 1);call write~init~int#11(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int#12(32, 25, 0, 1);call write~init~int#12(37, 25, 1, 1);call write~init~int#12(105, 25, 2, 1);call write~init~int#12(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int#13(32, 26, 0, 1);call write~init~int#13(37, 26, 1, 1);call write~init~int#13(105, 26, 2, 1);call write~init~int#13(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int#14(32, 27, 0, 1);call write~init~int#14(37, 27, 1, 1);call write~init~int#14(105, 27, 2, 1);call write~init~int#14(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int#15(32, 28, 0, 1);call write~init~int#15(37, 28, 1, 1);call write~init~int#15(105, 28, 2, 1);call write~init~int#15(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int#16(32, 29, 0, 1);call write~init~int#16(37, 29, 1, 1);call write~init~int#16(105, 29, 2, 1);call write~init~int#16(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int#17(32, 30, 0, 1);call write~init~int#17(70, 30, 1, 1);call write~init~int#17(95, 30, 2, 1);call write~init~int#17(112, 30, 3, 1);call write~init~int#17(58, 30, 4, 1);call write~init~int#17(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int#18(32, 31, 0, 1);call write~init~int#18(37, 31, 1, 1);call write~init~int#18(105, 31, 2, 1);call write~init~int#18(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int#19(32, 32, 0, 1);call write~init~int#19(37, 32, 1, 1);call write~init~int#19(105, 32, 2, 1);call write~init~int#19(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int#1(32, 33, 0, 1);call write~init~int#1(37, 33, 1, 1);call write~init~int#1(105, 33, 2, 1);call write~init~int#1(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int#2(32, 34, 0, 1);call write~init~int#2(37, 34, 1, 1);call write~init~int#2(105, 34, 2, 1);call write~init~int#2(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int#3(32, 35, 0, 1);call write~init~int#3(37, 35, 1, 1);call write~init~int#3(105, 35, 2, 1);call write~init~int#3(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int#4(10, 36, 0, 1);call write~init~int#4(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true;assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true;assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1;" "main_#t~ret60#1 := valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1;" "assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true;assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;assume { :end_inline_initFloors } true;assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume !(0 == isFloorCalling_~floorID#1);" "assume 1 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_1~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1;" "continueInDirection_#t~ret82#1 := isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;havoc isTopFloor_#in~floorID#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret82#1;havoc continueInDirection_#t~ret82#1;" "assume !(0 != continueInDirection_~tmp~21#1);" "assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1;" "assume !(0 == getOrigin_~person#1);" "assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1;" "bobCall_#t~ret48#1 := getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;havoc getOrigin_#in~person#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1;" "assume 0 == initPersonOnFloor_~floor#1;" "assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1;" "assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1;" "assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1;" "havoc callOnFloor_~floorID#1;havoc callOnFloor_#in~floorID#1;assume { :end_inline_callOnFloor } true;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;havoc initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1;assume { :end_inline_initPersonOnFloor } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1;" "assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1;" "assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1;" "__utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;havoc buttonForFloorIsPressed_#in~floorID#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1;" "assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1;" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume !(1 == ~doorState~0);" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume !(0 == ~currentFloorID~0);" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0;" "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-17 20:26:56,813 INFO L754 eck$LassoCheckResult]: Loop: "assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1;" "cleanup_#t~ret54#1 := isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1;" "assume 1 != cleanup_~tmp___0~4#1;assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1;" "assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1;" "isIdle_#t~ret67#1 := anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1;" "cleanup_#t~ret55#1 := isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1;" "assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "__utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1;" "__utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1;" "assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3);" "assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4);" "havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1;" "assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1;" "assume ~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1;" "assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1;" "stopRequestedAtCurrentFloor_#t~ret87#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret83#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret84#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~22#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~9#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret87#1;havoc stopRequestedAtCurrentFloor_#t~ret87#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1;" "timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1;" "assume !(0 != timeShift_~tmp___9~3#1);" "assume 1 == ~doorState~0;~doorState~0 := 0;" "assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1;" "assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1;" "isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;havoc isFloorCalling_#in~floorID#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1;" "stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1;" "assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1;" "stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1;" "timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;havoc stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1;" "assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1;" "assume !(1 == ~currentHeading~0);" "assume 0 == ~currentFloorID~0;~currentHeading~0 := 1;" "assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1;" "havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;havoc continueInDirection_#in~dir#1;assume { :end_inline_continueInDirection } true;" "assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1;" "assume !(-1 == ~expectedDirection~0);" "assume !(1 == ~expectedDirection~0);" "havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;assume { :end_inline___utac_acc__Specification3_spec__2 } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1;" "assume true;cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1;" [2025-03-17 20:26:56,814 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:56,814 INFO L85 PathProgramCache]: Analyzing trace with hash -1374938000, now seen corresponding path program 1 times [2025-03-17 20:26:56,814 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:56,814 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [906424525] [2025-03-17 20:26:56,814 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:56,814 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:56,859 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 158 statements into 1 equivalence classes. [2025-03-17 20:26:56,866 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 158 of 158 statements. [2025-03-17 20:26:56,869 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:56,870 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:56,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:56,932 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:56,932 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [906424525] [2025-03-17 20:26:56,932 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [906424525] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:56,932 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:56,932 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2025-03-17 20:26:56,932 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1936172233] [2025-03-17 20:26:56,932 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:56,933 INFO L757 eck$LassoCheckResult]: stem already infeasible [2025-03-17 20:26:56,933 INFO L157 PredicateUnifier]: Initialized classic predicate unifier [2025-03-17 20:26:56,933 INFO L85 PathProgramCache]: Analyzing trace with hash 1329476629, now seen corresponding path program 1 times [2025-03-17 20:26:56,933 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2025-03-17 20:26:56,933 INFO L334 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1064149845] [2025-03-17 20:26:56,933 INFO L97 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2025-03-17 20:26:56,933 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2025-03-17 20:26:56,941 INFO L108 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY partitioned 48 statements into 1 equivalence classes. [2025-03-17 20:26:56,944 INFO L111 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) and asserted 48 of 48 statements. [2025-03-17 20:26:56,944 INFO L114 AnnotateAndAsserter]: Assert order NOT_INCREMENTALLY issued 1 check-sat command(s) [2025-03-17 20:26:56,944 INFO L115 AnnotateAndAsserter]: Conjunction of SSA is unsat [2025-03-17 20:26:57,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2025-03-17 20:26:57,000 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2025-03-17 20:26:57,000 INFO L334 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1064149845] [2025-03-17 20:26:57,000 INFO L158 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1064149845] provided 1 perfect and 0 imperfect interpolant sequences [2025-03-17 20:26:57,000 INFO L185 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2025-03-17 20:26:57,000 INFO L198 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2025-03-17 20:26:57,000 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1522654229] [2025-03-17 20:26:57,000 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2025-03-17 20:26:57,001 INFO L769 eck$LassoCheckResult]: loop already infeasible [2025-03-17 20:26:57,001 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2025-03-17 20:26:57,005 INFO L144 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2025-03-17 20:26:57,005 INFO L146 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2025-03-17 20:26:57,005 INFO L87 Difference]: Start difference. First operand 242788 states and 450386 transitions. cyclomatic complexity: 207630 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2025-03-17 20:26:58,289 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2025-03-17 20:26:58,289 INFO L93 Difference]: Finished difference Result 243531 states and 451129 transitions. [2025-03-17 20:26:58,289 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 243531 states and 451129 transitions. [2025-03-17 20:26:59,579 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 72057 [2025-03-17 20:27:00,280 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 243531 states to 243531 states and 451129 transitions. [2025-03-17 20:27:00,281 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 194036 [2025-03-17 20:27:00,729 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 194036 [2025-03-17 20:27:00,729 INFO L73 IsDeterministic]: Start isDeterministic. Operand 243531 states and 451129 transitions. [2025-03-17 20:27:00,741 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2025-03-17 20:27:00,741 INFO L218 hiAutomatonCegarLoop]: Abstraction has 243531 states and 451129 transitions. [2025-03-17 20:27:00,870 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 243531 states and 451129 transitions.