./Ultimate.py --spec ../../sv-benchmarks/c/Termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 5842f4b8 Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 3a55681b09135ccff0bf93cef95d3a981a37b078 ........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-5842f4b [2018-11-18 14:49:26,859 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-11-18 14:49:26,860 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-11-18 14:49:26,866 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-11-18 14:49:26,866 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-11-18 14:49:26,867 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-11-18 14:49:26,868 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-11-18 14:49:26,869 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-11-18 14:49:26,870 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-11-18 14:49:26,870 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-11-18 14:49:26,871 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-11-18 14:49:26,871 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-11-18 14:49:26,872 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-11-18 14:49:26,872 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-11-18 14:49:26,873 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-11-18 14:49:26,874 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-11-18 14:49:26,874 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-11-18 14:49:26,875 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-11-18 14:49:26,876 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-11-18 14:49:26,878 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-11-18 14:49:26,878 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-11-18 14:49:26,879 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-11-18 14:49:26,881 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-11-18 14:49:26,881 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-11-18 14:49:26,881 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-11-18 14:49:26,881 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-11-18 14:49:26,882 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-11-18 14:49:26,882 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-11-18 14:49:26,883 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-11-18 14:49:26,883 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-11-18 14:49:26,884 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-11-18 14:49:26,884 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-11-18 14:49:26,884 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-11-18 14:49:26,884 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-11-18 14:49:26,885 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-11-18 14:49:26,885 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-11-18 14:49:26,886 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-11-18 14:49:26,893 INFO L110 SettingsManager]: Loading preferences was successful [2018-11-18 14:49:26,893 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-11-18 14:49:26,894 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-11-18 14:49:26,894 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-11-18 14:49:26,894 INFO L133 SettingsManager]: * Use SBE=true [2018-11-18 14:49:26,894 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-11-18 14:49:26,894 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Use old map elimination=false [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-11-18 14:49:26,895 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * sizeof long=4 [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-11-18 14:49:26,895 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * sizeof long double=12 [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-11-18 14:49:26,896 INFO L133 SettingsManager]: * Use constant arrays=true [2018-11-18 14:49:26,897 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-11-18 14:49:26,897 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-11-18 14:49:26,897 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-11-18 14:49:26,897 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-11-18 14:49:26,897 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-11-18 14:49:26,897 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-11-18 14:49:26,897 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-11-18 14:49:26,898 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-11-18 14:49:26,898 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 3a55681b09135ccff0bf93cef95d3a981a37b078 [2018-11-18 14:49:26,920 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-11-18 14:49:26,929 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-11-18 14:49:26,931 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-11-18 14:49:26,932 INFO L271 PluginConnector]: Initializing CDTParser... [2018-11-18 14:49:26,932 INFO L276 PluginConnector]: CDTParser initialized [2018-11-18 14:49:26,933 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-18 14:49:26,970 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/data/b4a3d32c0/01e86a52636e4fa88735857b984966e4/FLAGa14aba741 [2018-11-18 14:49:27,440 INFO L307 CDTParser]: Found 1 translation units. [2018-11-18 14:49:27,441 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/sv-benchmarks/c/product-lines/elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-18 14:49:27,455 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/data/b4a3d32c0/01e86a52636e4fa88735857b984966e4/FLAGa14aba741 [2018-11-18 14:49:27,955 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/data/b4a3d32c0/01e86a52636e4fa88735857b984966e4 [2018-11-18 14:49:27,957 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-11-18 14:49:27,958 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-11-18 14:49:27,959 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-11-18 14:49:27,959 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-11-18 14:49:27,961 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-11-18 14:49:27,962 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 02:49:27" (1/1) ... [2018-11-18 14:49:27,964 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@209e89ff and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:27, skipping insertion in model container [2018-11-18 14:49:27,964 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 18.11 02:49:27" (1/1) ... [2018-11-18 14:49:27,969 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-11-18 14:49:28,010 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-11-18 14:49:28,395 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 14:49:28,404 INFO L191 MainTranslator]: Completed pre-run [2018-11-18 14:49:28,477 INFO L201 PostProcessor]: Analyzing one entry point: main [2018-11-18 14:49:28,514 INFO L195 MainTranslator]: Completed translation [2018-11-18 14:49:28,515 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28 WrapperNode [2018-11-18 14:49:28,515 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-11-18 14:49:28,515 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-11-18 14:49:28,515 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-11-18 14:49:28,515 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-11-18 14:49:28,520 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,536 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,713 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-11-18 14:49:28,713 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-11-18 14:49:28,713 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-11-18 14:49:28,713 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-11-18 14:49:28,722 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,722 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,750 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,750 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,812 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,878 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,902 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... [2018-11-18 14:49:28,937 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-11-18 14:49:28,938 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-11-18 14:49:28,938 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-11-18 14:49:28,938 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-11-18 14:49:28,938 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:49:28,986 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-11-18 14:49:28,987 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-11-18 14:49:28,987 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-11-18 14:49:37,232 INFO L278 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-11-18 14:49:37,232 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 02:49:37 BoogieIcfgContainer [2018-11-18 14:49:37,232 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-11-18 14:49:37,232 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-11-18 14:49:37,233 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-11-18 14:49:37,235 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-11-18 14:49:37,235 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 14:49:37,235 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 18.11 02:49:27" (1/3) ... [2018-11-18 14:49:37,237 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@675bad34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 02:49:37, skipping insertion in model container [2018-11-18 14:49:37,237 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 14:49:37,237 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 18.11 02:49:28" (2/3) ... [2018-11-18 14:49:37,237 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@675bad34 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 18.11 02:49:37, skipping insertion in model container [2018-11-18 14:49:37,237 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-11-18 14:49:37,237 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 02:49:37" (3/3) ... [2018-11-18 14:49:37,238 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product27_false-unreach-call_true-termination.cil.c [2018-11-18 14:49:37,273 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-11-18 14:49:37,274 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-11-18 14:49:37,274 INFO L375 BuchiCegarLoop]: Hoare is false [2018-11-18 14:49:37,274 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-11-18 14:49:37,274 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-11-18 14:49:37,274 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-11-18 14:49:37,274 INFO L379 BuchiCegarLoop]: Difference is false [2018-11-18 14:49:37,274 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-11-18 14:49:37,274 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-11-18 14:49:37,332 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6704 states. [2018-11-18 14:49:37,412 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1357 [2018-11-18 14:49:37,412 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:49:37,412 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:49:37,427 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:37,427 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:37,427 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-11-18 14:49:37,427 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6704 states. [2018-11-18 14:49:37,464 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1357 [2018-11-18 14:49:37,464 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:49:37,464 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:49:37,468 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:37,468 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:37,476 INFO L794 eck$LassoCheckResult]: Stem: 1360#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 5918#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25;assume { :begin_inline_select_helpers } true; 952#L3055true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1069#L3048true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 113#L3063true main_#t~ret134 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 88#L2358true assume 0 != main_~tmp~25;assume { :begin_inline_setup } true; 727#L2332true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2611#L2447true assume { :end_inline_initFloors } true; 2326#L99true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2535#L1741true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5557#L1766true bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 313#L2725true assume 0 == initPersonOnFloor_~floor; 2144#L2726true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6314#L2833-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1106#L2517true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 241#L2529-2true assume { :end_inline_callOnFloor } true; 1118#L2869true assume { :end_inline_initPersonOnFloor } true; 4007#L2082true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1497#L303true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5829#L355true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 334#L1840true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4342#L1902true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4021#L320-5true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3415#L341-5true __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 3996#L1906true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6663#L1946true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3346#L2454true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6302#L2481true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5550#L1590true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2000#L972true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1502#L303-1true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2358#L976true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1341#L989true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 21#L1127true assume !(0 != timeShift_~tmp___9~2); 3474#L1218true assume !(1 == ~doorState~0); 3477#L1218-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3340#L2454-3true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6283#L2481-3true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5552#L1590-1true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2811#L855true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1501#L303-2true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3353#L868true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2967#L1226true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5409#L912true assume !(1 == ~currentHeading~0); 914#L922true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 911#L922-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 682#L928-1true assume { :end_inline_continueInDirection } true; 5906#L1235-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5446#L1971true assume !(-1 == ~expectedDirection~0); 661#L1983true assume !(1 == ~expectedDirection~0); 689#L1984true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6320#L1250true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1499#L303-4true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5840#L355-3true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 333#L1840-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 404#L1841-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3993#L320-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3380#L341-12true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2141#L1845-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6654#L1946-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3432#L2454-25true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6219#L2481-25true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5711#L1590-3true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2001#L972-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 1498#L303-5true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2360#L976-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1342#L989-1true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 24#L1127-2true assume !(0 != timeShift_~tmp___9~2); 3478#L1218-3true assume 1 == ~doorState~0;~doorState~0 := 0; 3465#L1218-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3436#L2454-28true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6225#L2481-28true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5714#L1590-4true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2817#L855-2true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3753#L303-6true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3355#L868-2true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2956#L1226-2true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5390#L912-3true assume !(1 == ~currentHeading~0); 909#L922-9true assume !(0 == ~currentFloorID~0); 910#L922-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 629#L928-7true assume { :end_inline_continueInDirection } true; 5890#L1235-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5449#L1971-1true assume !(-1 == ~expectedDirection~0); 650#L1983-1true assume !(1 == ~expectedDirection~0); 688#L1984-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6321#L1250-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3755#L303-8true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5810#L355-6true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 330#L1840-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 403#L1841-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 3975#L320-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3238#L341-24true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2146#L1845-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6656#L1946-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3367#L2454-50true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6364#L2481-50true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5718#L1590-6true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 2002#L972-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3756#L303-9true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2351#L976-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1343#L989-2true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 14#L1127-4true assume !(0 != timeShift_~tmp___9~2); 3468#L1218-6true assume !(1 == ~doorState~0); 3471#L1218-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3373#L2454-53true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 6356#L2481-53true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5720#L1590-7true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2917#L855-4true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3757#L303-10true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3358#L868-4true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2959#L1226-4true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5398#L912-6true assume !(1 == ~currentHeading~0); 726#L922-18true assume !(0 == ~currentFloorID~0); 728#L922-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 618#L928-13true assume { :end_inline_continueInDirection } true; 5897#L1235-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5453#L1971-2true assume !(-1 == ~expectedDirection~0); 654#L1983-2true assume !(1 == ~expectedDirection~0); 685#L1984-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6325#L1250-2true assume { :end_inline_timeShift } true; 5340#L2149true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 2538#L1741-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 5561#L1766-1true bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 297#L2725-1true assume 0 == initPersonOnFloor_~floor; 2134#L2726-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 6308#L2833-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1100#L2517-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236#L2529-5true assume { :end_inline_callOnFloor } true; 1110#L2869-1true assume { :end_inline_initPersonOnFloor } true; 4012#L2082-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3745#L303-12true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5823#L355-9true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 331#L1840-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 385#L1841-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4143#L320-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3196#L341-36true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2147#L1845-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6655#L1946-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3173#L2454-75true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4857#L2481-75true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5702#L1590-9true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1940#L972-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3747#L303-13true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2352#L976-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1344#L989-3true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 16#L1127-6true assume !(0 != timeShift_~tmp___9~2); 3451#L1218-9true assume 1 == ~doorState~0;~doorState~0 := 0; 3455#L1218-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3150#L2454-78true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4847#L2481-78true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5704#L1590-10true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2923#L855-6true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3748#L303-14true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3349#L868-6true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2946#L1226-6true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5376#L912-9true assume !(1 == ~currentHeading~0); 724#L922-27true assume !(0 == ~currentFloorID~0); 718#L922-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 610#L928-19true assume { :end_inline_continueInDirection } true; 5878#L1235-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5456#L1971-3true assume !(-1 == ~expectedDirection~0); 656#L1983-3true assume !(1 == ~expectedDirection~0); 686#L1984-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 6327#L1250-3true assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 1120#L2164-3true [2018-11-18 14:49:37,483 INFO L796 eck$LassoCheckResult]: Loop: 1120#L2164-3true assume true; 1119#L2164-1true assume !false; 1099#L2165true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1052#L2168true assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 3712#L130true cleanup_#t~ret128 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 1030#L2172true assume 1 != cleanup_~tmp___0~12; 1028#L2172-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3325#L2454-100true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4825#L2481-100true anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 942#L411true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 1546#L475true isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 3556#L488true cleanup_#t~ret129 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 22#L2184true assume !(0 != cleanup_~tmp~23);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3752#L303-16true __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 5795#L355-12true __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 332#L1840-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 391#L1841-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 4118#L320-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 3157#L341-48true __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 2136#L1845-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6658#L1946-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3314#L2454-105true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4820#L2481-105true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5709#L1590-12true stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 1941#L972-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3739#L303-17true stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 2353#L976-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 1336#L989-4true timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 18#L1127-8true assume !(0 != timeShift_~tmp___9~2); 3459#L1218-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3542#L1218-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 3319#L2454-108true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 4823#L2481-108true isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 5692#L1590-13true stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 2927#L855-8true assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 3740#L303-18true stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 3351#L868-8true timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 2948#L1226-8true assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 5357#L912-12true assume !(1 == ~currentHeading~0); 717#L922-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 711#L922-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 601#L928-25true assume { :end_inline_continueInDirection } true; 5886#L1235-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5455#L1971-4true assume !(-1 == ~expectedDirection~0); 655#L1983-4true assume !(1 == ~expectedDirection~0); 687#L1984-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4854#L1250-4true assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 1120#L2164-3true [2018-11-18 14:49:37,491 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:37,492 INFO L82 PathProgramCache]: Analyzing trace with hash -1293085871, now seen corresponding path program 1 times [2018-11-18 14:49:37,493 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:37,494 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:37,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:37,530 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:37,530 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:37,618 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:38,428 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:38,430 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:38,431 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 14:49:38,434 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 14:49:38,434 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:38,434 INFO L82 PathProgramCache]: Analyzing trace with hash -1408226094, now seen corresponding path program 1 times [2018-11-18 14:49:38,435 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:38,435 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:38,435 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:38,436 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:38,436 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:38,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:38,481 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:38,481 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:38,481 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 14:49:38,482 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 14:49:38,491 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 14:49:38,492 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 14:49:38,493 INFO L87 Difference]: Start difference. First operand 6704 states. Second operand 5 states. [2018-11-18 14:49:42,514 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 14:49:42,515 INFO L93 Difference]: Finished difference Result 13499 states and 24929 transitions. [2018-11-18 14:49:42,515 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 14:49:42,517 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13499 states and 24929 transitions. [2018-11-18 14:49:42,607 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2850 [2018-11-18 14:49:42,697 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13499 states to 13417 states and 24834 transitions. [2018-11-18 14:49:42,698 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13417 [2018-11-18 14:49:42,711 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13417 [2018-11-18 14:49:42,712 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13417 states and 24834 transitions. [2018-11-18 14:49:42,733 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:49:42,733 INFO L705 BuchiCegarLoop]: Abstraction has 13417 states and 24834 transitions. [2018-11-18 14:49:42,762 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13417 states and 24834 transitions. [2018-11-18 14:49:42,949 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13417 to 12831. [2018-11-18 14:49:42,950 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 12831 states. [2018-11-18 14:49:42,970 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 12831 states to 12831 states and 23879 transitions. [2018-11-18 14:49:42,972 INFO L728 BuchiCegarLoop]: Abstraction has 12831 states and 23879 transitions. [2018-11-18 14:49:42,972 INFO L608 BuchiCegarLoop]: Abstraction has 12831 states and 23879 transitions. [2018-11-18 14:49:42,972 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-11-18 14:49:42,972 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 12831 states and 23879 transitions. [2018-11-18 14:49:43,021 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2614 [2018-11-18 14:49:43,021 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:49:43,021 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:49:43,025 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:43,025 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:43,027 INFO L794 eck$LassoCheckResult]: Stem: 22216#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 22217#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25;assume { :begin_inline_select_helpers } true; 21660#L3055 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 21661#L3048 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 20499#L3063 main_#t~ret134 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 20467#L2358 assume 0 != main_~tmp~25;assume { :begin_inline_setup } true; 20468#L2332 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 21353#L2447 assume { :end_inline_initFloors } true; 23327#L99 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 23328#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 23513#L1766 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20788#L2725 assume 0 == initPersonOnFloor_~floor; 20789#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21933#L2833-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 21880#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 20656#L2529-2 assume { :end_inline_callOnFloor } true; 20657#L2869 assume { :end_inline_initPersonOnFloor } true; 21892#L2082 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22506#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 22507#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 20822#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 20823#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 25150#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 23505#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 24812#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 23581#L1946 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 28835#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28830#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 28829#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 28827#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 28828#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 28796#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 28795#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 28794#L1127 assume !(0 != timeShift_~tmp___9~2); 28793#L1218 assume !(1 == ~doorState~0); 28792#L1218-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 28790#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28708#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 28701#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 28635#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 28589#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 28588#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 28587#L1226 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 28586#L912 assume !(1 == ~currentHeading~0); 21611#L922 assume !(0 == ~currentFloorID~0); 21612#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21268#L928-1 assume { :end_inline_continueInDirection } true; 21198#L1235-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26486#L1971 assume !(-1 == ~expectedDirection~0); 26174#L1983 assume !(1 == ~expectedDirection~0); 28857#L1984 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 28752#L1250 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22510#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 22511#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26874#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 25400#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 25138#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 23759#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 24788#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 23585#L1946-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 28584#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28580#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 28579#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 28561#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 28556#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 28548#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 28545#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 28543#L1127-2 assume !(0 != timeShift_~tmp___9~2); 28538#L1218-3 assume 1 == ~doorState~0;~doorState~0 := 0; 28536#L1218-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 28533#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28530#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 28525#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 28344#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 28289#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 28287#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 28285#L1226-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 28182#L912-3 assume !(1 == ~currentHeading~0); 21602#L922-9 assume !(0 == ~currentFloorID~0); 21604#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 28881#L928-7 assume { :end_inline_continueInDirection } true; 28880#L1235-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 28878#L1971-1 assume !(-1 == ~expectedDirection~0); 28861#L1983-1 assume !(1 == ~expectedDirection~0); 28856#L1984-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 28761#L1250-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25002#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 25003#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26832#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 25402#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 25115#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 23728#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 24602#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 23564#L1946-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 28153#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28150#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 28141#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 28129#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 28123#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 28113#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 28109#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 28095#L1127-4 assume !(0 != timeShift_~tmp___9~2); 28091#L1218-6 assume !(1 == ~doorState~0); 28089#L1218-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 27486#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 27439#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 27436#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 27391#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 27294#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 27286#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 27282#L1226-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 27278#L912-6 assume !(1 == ~currentHeading~0); 21350#L922-18 assume !(0 == ~currentFloorID~0); 21352#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21161#L928-13 assume { :end_inline_continueInDirection } true; 21162#L1235-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 26492#L1971-2 assume !(-1 == ~expectedDirection~0); 21217#L1983-2 assume !(1 == ~expectedDirection~0); 21218#L1984-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 21273#L1250-2 assume { :end_inline_timeShift } true; 26460#L2149 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 23573#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 23516#L1766-1 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 20776#L2725-1 assume 0 == initPersonOnFloor_~floor; 20777#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 21938#L2833-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 30488#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 28865#L2529-5 assume { :end_inline_callOnFloor } true; 28858#L2869-1 assume { :end_inline_initPersonOnFloor } true; 28762#L2082-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 24998#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 24999#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 26851#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 25401#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 25240#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 23663#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 24562#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 23567#L1946-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 24563#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 24406#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 26057#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 22997#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 22998#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 23354#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 21056#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 20264#L1127-6 assume !(0 != timeShift_~tmp___9~2); 20266#L1218-9 assume 1 == ~doorState~0;~doorState~0 := 0; 24821#L1218-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 24824#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 28156#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 27646#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 27345#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 27292#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 27285#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 27280#L1226-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 27277#L912-9 assume !(1 == ~currentHeading~0); 21347#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 21335#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21336#L928-19 assume { :end_inline_continueInDirection } true; 31400#L1235-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 31398#L1971-3 assume !(-1 == ~expectedDirection~0); 21223#L1983-3 assume !(1 == ~expectedDirection~0); 21224#L1984-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 21274#L1250-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 21895#L2164-3 [2018-11-18 14:49:43,033 INFO L796 eck$LassoCheckResult]: Loop: 21895#L2164-3 assume true; 21893#L2164-1 assume !false; 21894#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 31389#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 31388#L130 cleanup_#t~ret128 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 31387#L2172 assume 1 != cleanup_~tmp___0~12; 31386#L2172-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 31385#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 30544#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 21650#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 20303#L475 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 22613#L488 cleanup_#t~ret129 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 28763#L2184 assume !(0 != cleanup_~tmp~23);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 25000#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 25001#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 20818#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 20819#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 20939#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 23490#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 23175#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 22255#L1946-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 24748#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 24749#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 26044#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 23000#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 23002#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 23356#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 21039#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 20270#L1127-8 assume !(0 != timeShift_~tmp___9~2); 20271#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 24826#L1218-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 24757#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 24759#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 26046#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 24092#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 24093#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 22492#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 24147#L1226-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 24148#L912-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 26333#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 26227#L916-36 assume 0 != continueInDirection_~tmp~7;~currentHeading~0 := 0; 21334#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21322#L928-25 assume { :end_inline_continueInDirection } true; 32229#L1235-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 32226#L1971-4 assume !(-1 == ~expectedDirection~0); 32224#L1983-4 assume !(1 == ~expectedDirection~0); 21275#L1984-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 21276#L1250-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 21895#L2164-3 [2018-11-18 14:49:43,038 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:43,039 INFO L82 PathProgramCache]: Analyzing trace with hash 1214892320, now seen corresponding path program 1 times [2018-11-18 14:49:43,039 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:43,039 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:43,040 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:43,041 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:43,041 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:43,154 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:43,961 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:43,961 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:43,961 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 14:49:43,962 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 14:49:43,962 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:43,962 INFO L82 PathProgramCache]: Analyzing trace with hash 1683251536, now seen corresponding path program 1 times [2018-11-18 14:49:43,962 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:43,962 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:43,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:43,963 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:43,963 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:43,970 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:43,996 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:43,996 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:43,996 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-11-18 14:49:43,997 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 14:49:43,997 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-11-18 14:49:43,997 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-11-18 14:49:43,997 INFO L87 Difference]: Start difference. First operand 12831 states and 23879 transitions. cyclomatic complexity: 11049 Second operand 5 states. [2018-11-18 14:49:45,698 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 14:49:45,698 INFO L93 Difference]: Finished difference Result 17941 states and 33347 transitions. [2018-11-18 14:49:45,699 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-11-18 14:49:45,700 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 17941 states and 33347 transitions. [2018-11-18 14:49:45,754 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3909 [2018-11-18 14:49:45,808 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 17941 states to 17931 states and 33337 transitions. [2018-11-18 14:49:45,808 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 17931 [2018-11-18 14:49:45,820 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 17931 [2018-11-18 14:49:45,820 INFO L73 IsDeterministic]: Start isDeterministic. Operand 17931 states and 33337 transitions. [2018-11-18 14:49:45,836 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:49:45,836 INFO L705 BuchiCegarLoop]: Abstraction has 17931 states and 33337 transitions. [2018-11-18 14:49:45,849 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 17931 states and 33337 transitions. [2018-11-18 14:49:45,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 17931 to 17908. [2018-11-18 14:49:45,970 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17908 states. [2018-11-18 14:49:45,988 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17908 states to 17908 states and 33310 transitions. [2018-11-18 14:49:45,988 INFO L728 BuchiCegarLoop]: Abstraction has 17908 states and 33310 transitions. [2018-11-18 14:49:45,989 INFO L608 BuchiCegarLoop]: Abstraction has 17908 states and 33310 transitions. [2018-11-18 14:49:45,989 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-11-18 14:49:45,989 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17908 states and 33310 transitions. [2018-11-18 14:49:46,031 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3907 [2018-11-18 14:49:46,031 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:49:46,032 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:49:46,035 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:46,035 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:46,035 INFO L794 eck$LassoCheckResult]: Stem: 52983#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 52984#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25;assume { :begin_inline_select_helpers } true; 52439#L3055 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 52440#L3048 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 51289#L3063 main_#t~ret134 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 51257#L2358 assume 0 != main_~tmp~25;assume { :begin_inline_setup } true; 51258#L2332 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 52142#L2447 assume { :end_inline_initFloors } true; 54077#L99 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 54078#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 54263#L1766 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 51586#L2725 assume 0 == initPersonOnFloor_~floor; 51587#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52712#L2833-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 52656#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 51454#L2529-2 assume { :end_inline_callOnFloor } true; 51455#L2869 assume { :end_inline_initPersonOnFloor } true; 52669#L2082 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 53274#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 53275#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 51624#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 51625#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 55908#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 54255#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 55560#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 54326#L1946 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 58361#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 58356#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 58355#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 58353#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58354#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 58316#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58315#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 58314#L1127 assume !(0 != timeShift_~tmp___9~2); 58313#L1218 assume !(1 == ~doorState~0); 58312#L1218-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 58310#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 58306#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 58301#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 58045#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 57991#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 57983#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 57978#L1226 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 57174#L912 assume !(1 == ~currentHeading~0); 52390#L922 assume !(0 == ~currentFloorID~0); 52386#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 52060#L928-1 assume { :end_inline_continueInDirection } true; 51993#L1235-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 60051#L1971 assume !(-1 == ~expectedDirection~0); 60044#L1983 assume !(1 == ~expectedDirection~0); 60034#L1984 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60024#L1250 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 60017#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 60013#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 57963#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 56135#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 55897#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 54503#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 55531#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 54330#L1946-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 61579#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 61575#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 61570#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 61567#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 61563#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 61561#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 61558#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 61552#L1127-2 assume !(0 != timeShift_~tmp___9~2); 55584#L1218-3 assume 1 == ~doorState~0;~doorState~0 := 0; 55580#L1218-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 55581#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 65093#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 65092#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 54716#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 54717#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 53272#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 55521#L1226-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 57170#L912-3 assume !(1 == ~currentHeading~0); 52383#L922-9 assume !(0 == ~currentFloorID~0); 52385#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 60698#L928-7 assume { :end_inline_continueInDirection } true; 60697#L1235-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 60151#L1971-1 assume !(-1 == ~expectedDirection~0); 60148#L1983-1 assume !(1 == ~expectedDirection~0); 60042#L1984-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60033#L1250-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 60023#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 60016#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 57965#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 56137#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 55874#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 54472#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 55339#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 54311#L1946-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 59371#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 59364#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 59362#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 59357#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 59356#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 59197#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59190#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 59187#L1127-4 assume !(0 != timeShift_~tmp___9~2); 59186#L1218-6 assume !(1 == ~doorState~0); 59185#L1218-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 59182#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 59178#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 59177#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 59176#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 59115#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 59114#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 59113#L1226-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 57173#L912-6 assume !(1 == ~currentHeading~0); 52139#L922-18 assume !(0 == ~currentFloorID~0); 52141#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 60577#L928-13 assume { :end_inline_continueInDirection } true; 60576#L1235-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 60574#L1971-2 assume !(-1 == ~expectedDirection~0); 60571#L1983-2 assume !(1 == ~expectedDirection~0); 60569#L1984-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 60568#L1250-2 assume { :end_inline_timeShift } true; 60567#L2149 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 60561#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 60560#L1766-1 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 60559#L2725-1 assume 0 == initPersonOnFloor_~floor; 60276#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 60257#L2833-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 60071#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 60066#L2529-5 assume { :end_inline_callOnFloor } true; 60041#L2869-1 assume { :end_inline_initPersonOnFloor } true; 60032#L2082-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 60022#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 60015#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 57964#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 56136#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 55994#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 54407#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 55298#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 54314#L1946-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 58992#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 58988#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 58983#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 58980#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 58976#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 58974#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 58971#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 58958#L1127-6 assume !(0 != timeShift_~tmp___9~2); 58955#L1218-9 assume 1 == ~doorState~0;~doorState~0 := 0; 58954#L1218-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 58941#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 58928#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 58141#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 58095#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 57995#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 57987#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 57974#L1226-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 57167#L912-9 assume !(1 == ~currentHeading~0); 52136#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 52137#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51941#L928-19 assume { :end_inline_continueInDirection } true; 51919#L1235-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57193#L1971-3 assume !(-1 == ~expectedDirection~0); 52017#L1983-3 assume !(1 == ~expectedDirection~0); 52018#L1984-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 52066#L1250-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 56769#L2164-3 [2018-11-18 14:49:46,038 INFO L796 eck$LassoCheckResult]: Loop: 56769#L2164-3 assume true; 65427#L2164-1 assume !false; 65425#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 65423#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 60440#L130 cleanup_#t~ret128 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 60439#L2172 assume 1 != cleanup_~tmp___0~12; 60438#L2172-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 60437#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 60432#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 60414#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 60404#L475 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 60403#L488 cleanup_#t~ret129 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 60402#L2184 assume !(0 != cleanup_~tmp~23);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 60401#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 60400#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 60399#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 60397#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 60398#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 60405#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 60377#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 60373#L1946-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 60360#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 60359#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 59789#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 59783#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 59781#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 59775#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 59773#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 59771#L1127-8 assume !(0 != timeShift_~tmp___9~2); 59770#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 59765#L1218-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 59763#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 59758#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 59757#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 59755#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 59741#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 59738#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 59693#L1226-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 57970#L912-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 57043#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 56949#L916-36 assume !(0 != continueInDirection_~tmp~7); 52125#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 51924#L928-25 assume { :end_inline_continueInDirection } true; 51907#L1235-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57191#L1971-4 assume !(-1 == ~expectedDirection~0); 52014#L1983-4 assume !(1 == ~expectedDirection~0); 52015#L1984-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 52067#L1250-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 56769#L2164-3 [2018-11-18 14:49:46,044 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:46,045 INFO L82 PathProgramCache]: Analyzing trace with hash 1214892320, now seen corresponding path program 2 times [2018-11-18 14:49:46,045 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:46,045 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:46,046 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:46,047 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:46,047 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:46,065 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:46,829 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:46,829 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:46,829 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 14:49:46,830 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 14:49:46,830 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:46,830 INFO L82 PathProgramCache]: Analyzing trace with hash 873904910, now seen corresponding path program 1 times [2018-11-18 14:49:46,830 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:46,830 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:46,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:46,831 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 14:49:46,831 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:46,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:46,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:46,864 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:46,864 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-11-18 14:49:46,864 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 14:49:46,864 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-11-18 14:49:46,864 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-11-18 14:49:46,864 INFO L87 Difference]: Start difference. First operand 17908 states and 33310 transitions. cyclomatic complexity: 15403 Second operand 3 states. [2018-11-18 14:49:47,845 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 14:49:47,846 INFO L93 Difference]: Finished difference Result 29114 states and 54137 transitions. [2018-11-18 14:49:47,846 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-11-18 14:49:47,846 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29114 states and 54137 transitions. [2018-11-18 14:49:47,952 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6478 [2018-11-18 14:49:48,053 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29114 states to 29114 states and 54137 transitions. [2018-11-18 14:49:48,054 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 29114 [2018-11-18 14:49:48,076 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 29114 [2018-11-18 14:49:48,076 INFO L73 IsDeterministic]: Start isDeterministic. Operand 29114 states and 54137 transitions. [2018-11-18 14:49:48,103 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:49:48,103 INFO L705 BuchiCegarLoop]: Abstraction has 29114 states and 54137 transitions. [2018-11-18 14:49:48,125 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 29114 states and 54137 transitions. [2018-11-18 14:49:48,435 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 29114 to 28778. [2018-11-18 14:49:48,436 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28778 states. [2018-11-18 14:49:48,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28778 states to 28778 states and 53558 transitions. [2018-11-18 14:49:48,490 INFO L728 BuchiCegarLoop]: Abstraction has 28778 states and 53558 transitions. [2018-11-18 14:49:48,490 INFO L608 BuchiCegarLoop]: Abstraction has 28778 states and 53558 transitions. [2018-11-18 14:49:48,490 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-11-18 14:49:48,490 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28778 states and 53558 transitions. [2018-11-18 14:49:48,612 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6322 [2018-11-18 14:49:48,612 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:49:48,612 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:49:48,616 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:48,616 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:49:48,616 INFO L794 eck$LassoCheckResult]: Stem: 100024#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 100025#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25;assume { :begin_inline_select_helpers } true; 99481#L3055 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 99482#L3048 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 98319#L3063 main_#t~ret134 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 98287#L2358 assume 0 != main_~tmp~25;assume { :begin_inline_setup } true; 98288#L2332 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 99178#L2447 assume { :end_inline_initFloors } true; 101126#L99 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 101127#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 101315#L1766 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 98620#L2725 assume 0 == initPersonOnFloor_~floor; 98621#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 99752#L2833-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 99693#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 98484#L2529-2 assume { :end_inline_callOnFloor } true; 98485#L2869 assume { :end_inline_initPersonOnFloor } true; 99708#L2082 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 100319#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 100320#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 98656#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 98657#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 102966#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 101307#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 102625#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 101379#L1946 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 105695#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 105690#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105689#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 105687#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 105688#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 105649#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 105648#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 105646#L1127 assume !(0 != timeShift_~tmp___9~2); 105640#L1218 assume !(1 == ~doorState~0); 105638#L1218-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 105206#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 105201#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105199#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 105196#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 105097#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 105090#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 105076#L1226 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 104238#L912 assume !(1 == ~currentHeading~0); 99432#L922 assume !(0 == ~currentFloorID~0); 99426#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 99427#L928-1 assume { :end_inline_continueInDirection } true; 100020#L1235-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 112158#L1971 assume !(-1 == ~expectedDirection~0); 121070#L1983 assume !(1 == ~expectedDirection~0); 119235#L1984 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 106148#L1250 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106142#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 106139#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 105067#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 103184#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 102955#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 101555#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 102590#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 101383#L1946-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 106585#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 106581#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106580#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 106578#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106577#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 106571#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106558#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 106557#L1127-2 assume !(0 != timeShift_~tmp___9~2); 106556#L1218-3 assume 1 == ~doorState~0;~doorState~0 := 0; 106555#L1218-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 106551#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 106548#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106547#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 106423#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106375#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 106372#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 106369#L1226-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 106367#L912-3 assume !(1 == ~currentHeading~0); 99422#L922-9 assume !(0 == ~currentFloorID~0); 99424#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 116558#L928-7 assume { :end_inline_continueInDirection } true; 100029#L1235-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 116542#L1971-1 assume !(-1 == ~expectedDirection~0); 103937#L1983-1 assume !(1 == ~expectedDirection~0); 99099#L1984-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 99100#L1250-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106188#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 106186#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 105070#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 103186#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 102932#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 101524#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 102395#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 101363#L1946-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 106183#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 106180#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 106171#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 106159#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106152#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 106144#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 106140#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 106137#L1127-4 assume !(0 != timeShift_~tmp___9~2); 106136#L1218-6 assume !(1 == ~doorState~0); 106135#L1218-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 105494#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 105490#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105445#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 105443#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 105150#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 105096#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 105088#L1226-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 105083#L912-6 assume !(1 == ~currentHeading~0); 99175#L922-18 assume !(0 == ~currentFloorID~0); 99177#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122004#L928-13 assume { :end_inline_continueInDirection } true; 122002#L1235-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 121081#L1971-2 assume !(-1 == ~expectedDirection~0); 121078#L1983-2 assume !(1 == ~expectedDirection~0); 121076#L1984-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 121075#L1250-2 assume { :end_inline_timeShift } true; 121071#L2149 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 121064#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 121062#L1766-1 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 121061#L2725-1 assume 0 == initPersonOnFloor_~floor; 121045#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 121027#L2833-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 121021#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 121011#L2529-5 assume { :end_inline_callOnFloor } true; 119240#L2869-1 assume { :end_inline_initPersonOnFloor } true; 106156#L2082-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 106147#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 106141#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 105069#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 103185#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 103054#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 101459#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 102354#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 101366#L1946-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 105892#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 105884#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105882#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 105877#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 105876#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 105874#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 105870#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 105868#L1127-6 assume !(0 != timeShift_~tmp___9~2); 105862#L1218-9 assume 1 == ~doorState~0;~doorState~0 := 0; 105860#L1218-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 105849#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 105253#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 105208#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 105202#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 105148#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 105095#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 105086#L1226-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 105082#L912-9 assume !(1 == ~currentHeading~0); 99171#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 99172#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 107467#L928-19 assume { :end_inline_continueInDirection } true; 107465#L1235-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 107462#L1971-3 assume !(-1 == ~expectedDirection~0); 107459#L1983-3 assume !(1 == ~expectedDirection~0); 107456#L1984-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 107455#L1250-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 107453#L2164-3 [2018-11-18 14:49:48,619 INFO L796 eck$LassoCheckResult]: Loop: 107453#L2164-3 assume true; 107452#L2164-1 assume !false; 107451#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 107450#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 107449#L130 cleanup_#t~ret128 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 107448#L2172 assume 1 != cleanup_~tmp___0~12; 107447#L2172-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 107442#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 107436#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 107420#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 107411#L475 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 107410#L488 cleanup_#t~ret129 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 107409#L2184 assume !(0 != cleanup_~tmp~23);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 107408#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 107407#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 98652#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 98653#L1841-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 98775#L1851-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1); 100875#L1862-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 2); 101049#L1873-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 3); 107375#L1884-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 4); 107374#L1946-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 120579#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 120578#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 120577#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 120575#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 120576#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 120558#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 120556#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 120555#L1127-8 assume !(0 != timeShift_~tmp___9~2); 107332#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 107333#L1218-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 107329#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 107324#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 107322#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 107323#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 107156#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 107155#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 107153#L1226-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 104218#L912-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 104087#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 104088#L916-36 assume !(0 != continueInDirection_~tmp~7); 99157#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 119269#L928-25 assume { :end_inline_continueInDirection } true; 119265#L1235-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 119261#L1971-4 assume !(-1 == ~expectedDirection~0); 119252#L1983-4 assume !(1 == ~expectedDirection~0); 107457#L1984-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 107454#L1250-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 107453#L2164-3 [2018-11-18 14:49:48,625 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:48,626 INFO L82 PathProgramCache]: Analyzing trace with hash 1214892320, now seen corresponding path program 3 times [2018-11-18 14:49:48,626 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:48,626 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:48,626 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:48,627 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:49:48,627 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:48,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:49,376 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:49,376 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:49,377 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 14:49:49,377 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 14:49:49,377 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:49:49,377 INFO L82 PathProgramCache]: Analyzing trace with hash -2008579909, now seen corresponding path program 1 times [2018-11-18 14:49:49,377 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:49:49,377 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:49:49,378 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:49,378 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 14:49:49,378 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:49:49,384 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:49:49,555 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:49:49,555 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:49:49,555 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [15] imperfect sequences [] total 15 [2018-11-18 14:49:49,556 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-11-18 14:49:49,556 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 15 interpolants. [2018-11-18 14:49:49,556 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=29, Invalid=181, Unknown=0, NotChecked=0, Total=210 [2018-11-18 14:49:49,556 INFO L87 Difference]: Start difference. First operand 28778 states and 53558 transitions. cyclomatic complexity: 24781 Second operand 15 states. [2018-11-18 14:50:12,466 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 14:50:12,466 INFO L93 Difference]: Finished difference Result 64797 states and 118335 transitions. [2018-11-18 14:50:12,466 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 91 states. [2018-11-18 14:50:12,467 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64797 states and 118335 transitions. [2018-11-18 14:50:12,617 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15012 [2018-11-18 14:50:12,731 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64797 states to 64797 states and 118335 transitions. [2018-11-18 14:50:12,731 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64797 [2018-11-18 14:50:12,763 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64797 [2018-11-18 14:50:12,764 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64797 states and 118335 transitions. [2018-11-18 14:50:12,811 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:50:12,811 INFO L705 BuchiCegarLoop]: Abstraction has 64797 states and 118335 transitions. [2018-11-18 14:50:12,837 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64797 states and 118335 transitions. [2018-11-18 14:50:13,189 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64797 to 44225. [2018-11-18 14:50:13,189 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 44225 states. [2018-11-18 14:50:13,235 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 44225 states to 44225 states and 81375 transitions. [2018-11-18 14:50:13,235 INFO L728 BuchiCegarLoop]: Abstraction has 44225 states and 81375 transitions. [2018-11-18 14:50:13,235 INFO L608 BuchiCegarLoop]: Abstraction has 44225 states and 81375 transitions. [2018-11-18 14:50:13,235 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-11-18 14:50:13,235 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 44225 states and 81375 transitions. [2018-11-18 14:50:13,317 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9982 [2018-11-18 14:50:13,317 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-11-18 14:50:13,317 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-11-18 14:50:13,324 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:50:13,324 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-11-18 14:50:13,324 INFO L794 eck$LassoCheckResult]: Stem: 193892#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];call #t~string53.base, #t~string53.offset := #Ultimate.alloc(10);call #t~string55.base, #t~string55.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string55.base,#t~string55.offset := 91];#memory_int := #memory_int[#t~string55.base,1 + #t~string55.offset := 95];#memory_int := #memory_int[#t~string55.base,2 + #t~string55.offset := 93];#memory_int := #memory_int[#t~string55.base,3 + #t~string55.offset := 0];call #t~string57.base, #t~string57.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string57.base,#t~string57.offset := 91];#memory_int := #memory_int[#t~string57.base,1 + #t~string57.offset := 93];#memory_int := #memory_int[#t~string57.base,2 + #t~string57.offset := 32];#memory_int := #memory_int[#t~string57.base,3 + #t~string57.offset := 0];call #t~string59.base, #t~string59.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string59.base,#t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,1 + #t~string59.offset := 97];#memory_int := #memory_int[#t~string59.base,2 + #t~string59.offset := 116];#memory_int := #memory_int[#t~string59.base,3 + #t~string59.offset := 32];#memory_int := #memory_int[#t~string59.base,4 + #t~string59.offset := 0];call #t~string61.base, #t~string61.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string61.base,#t~string61.offset := 37];#memory_int := #memory_int[#t~string61.base,1 + #t~string61.offset := 105];#memory_int := #memory_int[#t~string61.base,2 + #t~string61.offset := 0];call #t~string63.base, #t~string63.offset := #Ultimate.alloc(10);call #t~string65.base, #t~string65.offset := #Ultimate.alloc(3);#memory_int := #memory_int[#t~string65.base,#t~string65.offset := 117];#memory_int := #memory_int[#t~string65.base,1 + #t~string65.offset := 112];#memory_int := #memory_int[#t~string65.base,2 + #t~string65.offset := 0];call #t~string67.base, #t~string67.offset := #Ultimate.alloc(5);#memory_int := #memory_int[#t~string67.base,#t~string67.offset := 100];#memory_int := #memory_int[#t~string67.base,1 + #t~string67.offset := 111];#memory_int := #memory_int[#t~string67.base,2 + #t~string67.offset := 119];#memory_int := #memory_int[#t~string67.base,3 + #t~string67.offset := 110];#memory_int := #memory_int[#t~string67.base,4 + #t~string67.offset := 0];call #t~string69.base, #t~string69.offset := #Ultimate.alloc(7);#memory_int := #memory_int[#t~string69.base,#t~string69.offset := 32];#memory_int := #memory_int[#t~string69.base,1 + #t~string69.offset := 73];#memory_int := #memory_int[#t~string69.base,2 + #t~string69.offset := 76];#memory_int := #memory_int[#t~string69.base,3 + #t~string69.offset := 95];#memory_int := #memory_int[#t~string69.base,4 + #t~string69.offset := 112];#memory_int := #memory_int[#t~string69.base,5 + #t~string69.offset := 58];#memory_int := #memory_int[#t~string69.base,6 + #t~string69.offset := 0];call #t~string71.base, #t~string71.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string71.base,#t~string71.offset := 32];#memory_int := #memory_int[#t~string71.base,1 + #t~string71.offset := 37];#memory_int := #memory_int[#t~string71.base,2 + #t~string71.offset := 105];#memory_int := #memory_int[#t~string71.base,3 + #t~string71.offset := 0];call #t~string73.base, #t~string73.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string73.base,#t~string73.offset := 32];#memory_int := #memory_int[#t~string73.base,1 + #t~string73.offset := 37];#memory_int := #memory_int[#t~string73.base,2 + #t~string73.offset := 105];#memory_int := #memory_int[#t~string73.base,3 + #t~string73.offset := 0];call #t~string75.base, #t~string75.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string75.base,#t~string75.offset := 32];#memory_int := #memory_int[#t~string75.base,1 + #t~string75.offset := 37];#memory_int := #memory_int[#t~string75.base,2 + #t~string75.offset := 105];#memory_int := #memory_int[#t~string75.base,3 + #t~string75.offset := 0];call #t~string77.base, #t~string77.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string77.base,#t~string77.offset := 32];#memory_int := #memory_int[#t~string77.base,1 + #t~string77.offset := 37];#memory_int := #memory_int[#t~string77.base,2 + #t~string77.offset := 105];#memory_int := #memory_int[#t~string77.base,3 + #t~string77.offset := 0];call #t~string79.base, #t~string79.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string79.base,#t~string79.offset := 32];#memory_int := #memory_int[#t~string79.base,1 + #t~string79.offset := 37];#memory_int := #memory_int[#t~string79.base,2 + #t~string79.offset := 105];#memory_int := #memory_int[#t~string79.base,3 + #t~string79.offset := 0];call #t~string81.base, #t~string81.offset := #Ultimate.alloc(6);#memory_int := #memory_int[#t~string81.base,#t~string81.offset := 32];#memory_int := #memory_int[#t~string81.base,1 + #t~string81.offset := 70];#memory_int := #memory_int[#t~string81.base,2 + #t~string81.offset := 95];#memory_int := #memory_int[#t~string81.base,3 + #t~string81.offset := 112];#memory_int := #memory_int[#t~string81.base,4 + #t~string81.offset := 58];#memory_int := #memory_int[#t~string81.base,5 + #t~string81.offset := 0];call #t~string84.base, #t~string84.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string84.base,#t~string84.offset := 32];#memory_int := #memory_int[#t~string84.base,1 + #t~string84.offset := 37];#memory_int := #memory_int[#t~string84.base,2 + #t~string84.offset := 105];#memory_int := #memory_int[#t~string84.base,3 + #t~string84.offset := 0];call #t~string87.base, #t~string87.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string87.base,#t~string87.offset := 32];#memory_int := #memory_int[#t~string87.base,1 + #t~string87.offset := 37];#memory_int := #memory_int[#t~string87.base,2 + #t~string87.offset := 105];#memory_int := #memory_int[#t~string87.base,3 + #t~string87.offset := 0];call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string90.base,#t~string90.offset := 32];#memory_int := #memory_int[#t~string90.base,1 + #t~string90.offset := 37];#memory_int := #memory_int[#t~string90.base,2 + #t~string90.offset := 105];#memory_int := #memory_int[#t~string90.base,3 + #t~string90.offset := 0];call #t~string93.base, #t~string93.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string93.base,#t~string93.offset := 32];#memory_int := #memory_int[#t~string93.base,1 + #t~string93.offset := 37];#memory_int := #memory_int[#t~string93.base,2 + #t~string93.offset := 105];#memory_int := #memory_int[#t~string93.base,3 + #t~string93.offset := 0];call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);#memory_int := #memory_int[#t~string96.base,#t~string96.offset := 32];#memory_int := #memory_int[#t~string96.base,1 + #t~string96.offset := 37];#memory_int := #memory_int[#t~string96.base,2 + #t~string96.offset := 105];#memory_int := #memory_int[#t~string96.base,3 + #t~string96.offset := 0];call #t~string98.base, #t~string98.offset := #Ultimate.alloc(2);#memory_int := #memory_int[#t~string98.base,#t~string98.offset := 10];#memory_int := #memory_int[#t~string98.base,1 + #t~string98.offset := 0];call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string157.base, #t~string157.offset := #Ultimate.alloc(30);call #t~string158.base, #t~string158.offset := #Ultimate.alloc(9);call #t~string159.base, #t~string159.offset := #Ultimate.alloc(21);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25);call #t~string166.base, #t~string166.offset := #Ultimate.alloc(30);call #t~string167.base, #t~string167.offset := #Ultimate.alloc(9);call #t~string168.base, #t~string168.offset := #Ultimate.alloc(25);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 193893#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res;havoc main_#t~ret134, main_~retValue_acc~21, main_~tmp~25;havoc main_~retValue_acc~21;havoc main_~tmp~25;assume { :begin_inline_select_helpers } true; 193347#L3055 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 193348#L3048 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res;havoc valid_product_~retValue_acc~26;havoc valid_product_~retValue_acc~26;valid_product_~retValue_acc~26 := 1;valid_product_#res := valid_product_~retValue_acc~26; 192107#L3063 main_#t~ret134 := valid_product_#res;assume { :end_inline_valid_product } true;main_~tmp~25 := main_#t~ret134;havoc main_#t~ret134; 192075#L2358 assume 0 != main_~tmp~25;assume { :begin_inline_setup } true; 192076#L2332 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 193042#L2447 assume { :end_inline_initFloors } true; 195051#L99 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 195052#L1741 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 195245#L1766 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 192430#L2725 assume 0 == initPersonOnFloor_~floor; 192431#L2726 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 193617#L2833-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 193558#L2517 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 192297#L2529-2 assume { :end_inline_callOnFloor } true; 192298#L2869 assume { :end_inline_initPersonOnFloor } true; 193570#L2082 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 194195#L303 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 194196#L355 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 192464#L1840 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 192465#L1902 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 197001#L320-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 195237#L341-5 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 196616#L1906 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 195310#L1946 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200638#L2454 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200633#L2481 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200616#L1590 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 200610#L972 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200603#L303-1 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 200599#L976 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 200598#L989 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 200592#L1127 assume !(0 != timeShift_~tmp___9~2); 200591#L1218 assume !(1 == ~doorState~0); 200590#L1218-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200584#L2454-3 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200580#L2481-3 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200508#L1590-1 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 200462#L855 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200460#L303-2 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 199825#L868 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 199345#L1226 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 198388#L912 assume !(1 == ~currentHeading~0); 193298#L922 assume !(0 == ~currentFloorID~0); 193294#L922-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 192948#L928-1 assume { :end_inline_continueInDirection } true; 192878#L1235-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 202962#L1971 assume !(-1 == ~expectedDirection~0); 202086#L1983 assume !(1 == ~expectedDirection~0); 202083#L1984 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 200419#L1250 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200416#L303-4 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 200414#L355-3 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 199336#L1840-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 197233#L1902-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 196991#L320-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 195492#L341-17 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 196577#L1906-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 195313#L1946-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200856#L2454-25 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200848#L2481-25 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200846#L1590-3 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 200841#L972-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200840#L303-5 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 200838#L976-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 200835#L989-1 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 200833#L1127-2 assume !(0 != timeShift_~tmp___9~2); 200832#L1218-3 assume 1 == ~doorState~0;~doorState~0 := 0; 200827#L1218-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200748#L2454-28 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200744#L2481-28 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200742#L1590-4 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 200696#L855-2 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200648#L303-6 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 200645#L868-2 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 200642#L1226-2 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 200640#L912-3 assume !(1 == ~currentHeading~0); 193289#L922-9 assume !(0 == ~currentFloorID~0); 193291#L922-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 210400#L928-7 assume { :end_inline_continueInDirection } true; 192863#L1235-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 210127#L1971-1 assume !(-1 == ~expectedDirection~0); 210124#L1983-1 assume !(1 == ~expectedDirection~0); 204504#L1984-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 200425#L1250-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200421#L303-8 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 200418#L355-6 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 199340#L1840-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 197235#L1902-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 196958#L320-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 195461#L341-29 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 196366#L1906-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 195293#L1946-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200344#L2454-50 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200337#L2481-50 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200335#L1590-6 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 200330#L972-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200329#L303-9 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 200319#L976-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 200313#L989-2 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 200311#L1127-4 assume !(0 != timeShift_~tmp___9~2); 200298#L1218-6 assume !(1 == ~doorState~0); 200296#L1218-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200292#L2454-53 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200283#L2481-53 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200273#L1590-7 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 199562#L855-4 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 199373#L303-10 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 199364#L868-4 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 199356#L1226-4 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 199352#L912-6 assume !(1 == ~currentHeading~0); 193037#L922-18 assume !(0 == ~currentFloorID~0); 193039#L922-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 213256#L928-13 assume { :end_inline_continueInDirection } true; 192846#L1235-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 211459#L1971-2 assume !(-1 == ~expectedDirection~0); 211331#L1983-2 assume !(1 == ~expectedDirection~0); 211328#L1984-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 211327#L1250-2 assume { :end_inline_timeShift } true; 211326#L2149 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret122, bobCall_~tmp~17;havoc bobCall_~tmp~17;assume { :begin_inline_getOrigin } true;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~18;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~18; 211320#L1741-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~18 := 4;getOrigin_#res := getOrigin_~retValue_acc~18; 211319#L1766-1 bobCall_#t~ret122 := getOrigin_#res;assume { :end_inline_getOrigin } true;bobCall_~tmp~17 := bobCall_#t~ret122;havoc bobCall_#t~ret122;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~17;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 211318#L2725-1 assume 0 == initPersonOnFloor_~floor; 211300#L2726-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 210377#L2833-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 210121#L2517-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 210117#L2529-5 assume { :end_inline_callOnFloor } true; 204503#L2869-1 assume { :end_inline_initPersonOnFloor } true; 200420#L2082-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret128, cleanup_#t~ret129, cleanup_~i~3, cleanup_~tmp~23, cleanup_~tmp___0~12, cleanup_~__cil_tmp4~0;havoc cleanup_~i~3;havoc cleanup_~tmp~23;havoc cleanup_~tmp___0~12;havoc cleanup_~__cil_tmp4~0;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200417#L303-12 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 200415#L355-9 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 199338#L1840-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 197234#L1902-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 197096#L320-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 195396#L341-41 __utac_acc__Specification3_spec__1_#t~ret114 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret114;havoc __utac_acc__Specification3_spec__1_#t~ret114; 196320#L1906-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 195296#L1946-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200183#L2454-75 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200178#L2481-75 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200177#L1590-9 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 200175#L972-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 200169#L303-13 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 200166#L976-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 200163#L989-3 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 200161#L1127-6 assume !(0 != timeShift_~tmp___9~2); 200160#L1218-9 assume 1 == ~doorState~0;~doorState~0 := 0; 200159#L1218-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 200156#L2454-78 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 200153#L2481-78 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 200148#L1590-10 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 199516#L855-6 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 199371#L303-14 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 199363#L868-6 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 199354#L1226-6 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 199351#L912-9 assume !(1 == ~currentHeading~0); 193033#L922-27 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 193034#L922-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 229158#L928-19 assume { :end_inline_continueInDirection } true; 226895#L1235-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 226890#L1971-3 assume !(-1 == ~expectedDirection~0); 226884#L1983-3 assume !(1 == ~expectedDirection~0); 226879#L1984-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 226877#L1250-3 assume { :end_inline_timeShift } true;cleanup_~i~3 := 0; 225115#L2164-3 [2018-11-18 14:50:13,328 INFO L796 eck$LassoCheckResult]: Loop: 225115#L2164-3 assume true; 225113#L2164-1 assume !false; 225111#L2165 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 225108#L2168 assume cleanup_~i~3 < cleanup_~__cil_tmp4~0;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~0;havoc isBlocked_~retValue_acc~0;isBlocked_~retValue_acc~0 := 0;isBlocked_#res := isBlocked_~retValue_acc~0; 210391#L130 cleanup_#t~ret128 := isBlocked_#res;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12 := cleanup_#t~ret128;havoc cleanup_#t~ret128; 210389#L2172 assume 1 != cleanup_~tmp___0~12; 210388#L2172-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res;havoc isIdle_#t~ret8, isIdle_~retValue_acc~7, isIdle_~tmp~4;havoc isIdle_~retValue_acc~7;havoc isIdle_~tmp~4;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret3, anyStopRequested_#t~ret4, anyStopRequested_#t~ret5, anyStopRequested_#t~ret6, anyStopRequested_#t~ret7, anyStopRequested_~retValue_acc~6, anyStopRequested_~tmp~3, anyStopRequested_~tmp___0~0, anyStopRequested_~tmp___1~0, anyStopRequested_~tmp___2~0, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~6;havoc anyStopRequested_~tmp~3;havoc anyStopRequested_~tmp___0~0;havoc anyStopRequested_~tmp___1~0;havoc anyStopRequested_~tmp___2~0;havoc anyStopRequested_~tmp___3~0;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 210383#L2454-100 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 210374#L2481-100 anyStopRequested_#t~ret3 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret3;havoc anyStopRequested_#t~ret3; 204528#L411 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~6 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~6; 204518#L475 isIdle_#t~ret8 := anyStopRequested_#res;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4 := isIdle_#t~ret8;havoc isIdle_#t~ret8;isIdle_~retValue_acc~7 := (if 0 == isIdle_~tmp~4 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~7; 204500#L488 cleanup_#t~ret129 := isIdle_#res;assume { :end_inline_isIdle } true;cleanup_~tmp~23 := cleanup_#t~ret129;havoc cleanup_#t~ret129; 201165#L2184 assume !(0 != cleanup_~tmp~23);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret42, timeShift_#t~ret43, timeShift_#t~ret44, timeShift_#t~ret45, timeShift_#t~ret46, timeShift_#t~ret47, timeShift_#t~ret48, timeShift_#t~ret49, timeShift_#t~ret50, timeShift_#t~ret51, timeShift_#t~ret52, timeShift_~tmp~11, timeShift_~tmp___0~6, timeShift_~tmp___1~3, timeShift_~tmp___2~3, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~11;havoc timeShift_~tmp___0~6;havoc timeShift_~tmp___1~3;havoc timeShift_~tmp___2~3;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret107, __utac_acc__Specification3_spec__1_#t~ret108, __utac_acc__Specification3_spec__1_#t~ret109, __utac_acc__Specification3_spec__1_#t~ret110, __utac_acc__Specification3_spec__1_#t~ret111, __utac_acc__Specification3_spec__1_#t~ret112, __utac_acc__Specification3_spec__1_#t~ret113, __utac_acc__Specification3_spec__1_#t~ret114, __utac_acc__Specification3_spec__1_#t~ret115, __utac_acc__Specification3_spec__1_#t~ret116, __utac_acc__Specification3_spec__1_#t~ret117, __utac_acc__Specification3_spec__1_#t~ret118, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~15, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~7, __utac_acc__Specification3_spec__1_~tmp___2~5, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~15;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~7;havoc __utac_acc__Specification3_spec__1_~tmp___2~5;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 201164#L303-16 __utac_acc__Specification3_spec__1_#t~ret107 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15 := __utac_acc__Specification3_spec__1_#t~ret107;havoc __utac_acc__Specification3_spec__1_#t~ret107;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~15;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 201163#L355-12 __utac_acc__Specification3_spec__1_#t~ret108 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret108;havoc __utac_acc__Specification3_spec__1_#t~ret108; 201162#L1840-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 201160#L1841-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~3;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~3; 197088#L320-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~3 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~3; 195222#L341-48 __utac_acc__Specification3_spec__1_#t~ret109 := buttonForFloorIsPressed_#res;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret109;havoc __utac_acc__Specification3_spec__1_#t~ret109; 194912#L1845-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 193936#L1946-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret26, stopRequestedAtCurrentFloor_#t~ret27, stopRequestedAtCurrentFloor_#t~ret28, stopRequestedAtCurrentFloor_#t~ret29, stopRequestedAtCurrentFloor_~retValue_acc~12, stopRequestedAtCurrentFloor_~tmp~9, stopRequestedAtCurrentFloor_~tmp___0~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~12;havoc stopRequestedAtCurrentFloor_~tmp~9;havoc stopRequestedAtCurrentFloor_~tmp___0~4;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 204250#L2454-105 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 204249#L2481-105 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 204247#L1590-12 stopRequestedAtCurrentFloor_#t~ret26 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9 := stopRequestedAtCurrentFloor_#t~ret26;havoc stopRequestedAtCurrentFloor_#t~ret26; 204239#L972-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 204241#L303-17 stopRequestedAtCurrentFloor_#t~ret27 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4 := stopRequestedAtCurrentFloor_#t~ret27;havoc stopRequestedAtCurrentFloor_#t~ret27; 204225#L976-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4);stopRequestedAtCurrentFloor_~retValue_acc~12 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~12; 204220#L989-4 timeShift_#t~ret42 := stopRequestedAtCurrentFloor_#res;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2 := timeShift_#t~ret42;havoc timeShift_#t~ret42; 204214#L1127-8 assume !(0 != timeShift_~tmp___9~2); 204215#L1218-12 assume 1 == ~doorState~0;~doorState~0 := 0; 228015#L1218-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret20, stopRequestedInDirection_#t~ret21, stopRequestedInDirection_#t~ret22, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~9, stopRequestedInDirection_~tmp~6, stopRequestedInDirection_~tmp___0~2, stopRequestedInDirection_~__cil_tmp7~0, stopRequestedInDirection_~__cil_tmp8~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~9;havoc stopRequestedInDirection_~tmp~6;havoc stopRequestedInDirection_~tmp___0~2;havoc stopRequestedInDirection_~__cil_tmp7~0;havoc stopRequestedInDirection_~__cil_tmp8~0;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res;havoc isExecutiveFloorCalling_#t~ret100, isExecutiveFloorCalling_~retValue_acc~15;havoc isExecutiveFloorCalling_~retValue_acc~15;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID := ~executiveFloor~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~22;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~22; 228013#L2454-108 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~22 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~22; 228008#L2481-108 isExecutiveFloorCalling_#t~ret100 := isFloorCalling_#res;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15 := isExecutiveFloorCalling_#t~ret100;havoc isExecutiveFloorCalling_#t~ret100;isExecutiveFloorCalling_#res := isExecutiveFloorCalling_~retValue_acc~15; 214583#L1590-13 stopRequestedInDirection_#t~ret20 := isExecutiveFloorCalling_#res;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2 := stopRequestedInDirection_#t~ret20;havoc stopRequestedInDirection_#t~ret20; 214584#L855-8 assume 0 != stopRequestedInDirection_~tmp___0~2;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~1;havoc getCurrentFloorID_~retValue_acc~1;getCurrentFloorID_~retValue_acc~1 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~1; 214539#L303-18 stopRequestedInDirection_#t~ret21 := getCurrentFloorID_#res;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6 := stopRequestedInDirection_#t~ret21;havoc stopRequestedInDirection_#t~ret21;stopRequestedInDirection_~__cil_tmp7~0 := (if 1 == stopRequestedInDirection_~dir then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0 := (if stopRequestedInDirection_~tmp~6 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9 := (if stopRequestedInDirection_~__cil_tmp8~0 == stopRequestedInDirection_~__cil_tmp7~0 then 1 else 0);stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~9; 214540#L868-8 timeShift_#t~ret49 := stopRequestedInDirection_#res;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2 := timeShift_#t~ret49;havoc timeShift_#t~ret49; 214534#L1226-8 assume 0 != timeShift_~tmp___8~2;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret23, continueInDirection_~dir, continueInDirection_~tmp~7;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~7;~currentHeading~0 := continueInDirection_~dir; 214536#L912-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~24;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~24;isTopFloor_~retValue_acc~24 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~24; 230174#L3028-21 continueInDirection_#t~ret23 := isTopFloor_#res;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7 := continueInDirection_#t~ret23;havoc continueInDirection_#t~ret23; 230171#L916-36 assume !(0 != continueInDirection_~tmp~7); 230168#L922-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 230161#L928-25 assume { :end_inline_continueInDirection } true; 230158#L1235-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret119, __utac_acc__Specification3_spec__2_#t~ret120, __utac_acc__Specification3_spec__2_~tmp~16, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~16;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 226896#L1971-4 assume !(-1 == ~expectedDirection~0); 226892#L1983-4 assume 1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~4;havoc getCurrentHeading_~retValue_acc~4;getCurrentHeading_~retValue_acc~4 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~4; 226882#L355-14 __utac_acc__Specification3_spec__2_#t~ret120 := getCurrentHeading_#res;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp~16 := __utac_acc__Specification3_spec__2_#t~ret120;havoc __utac_acc__Specification3_spec__2_#t~ret120; 226880#L1988-12 assume !(0 == __utac_acc__Specification3_spec__2_~tmp~16); 226878#L1984-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 226876#L1250-4 assume { :end_inline_timeShift } true;cleanup_~i~3 := 1 + cleanup_~i~3; 225115#L2164-3 [2018-11-18 14:50:13,337 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:50:13,338 INFO L82 PathProgramCache]: Analyzing trace with hash 1214892320, now seen corresponding path program 4 times [2018-11-18 14:50:13,338 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:50:13,338 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:50:13,338 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:50:13,338 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-11-18 14:50:13,339 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:50:13,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:50:14,108 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:50:14,109 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-11-18 14:50:14,109 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-11-18 14:50:14,109 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-11-18 14:50:14,109 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:50:14,113 INFO L82 PathProgramCache]: Analyzing trace with hash -2003349591, now seen corresponding path program 1 times [2018-11-18 14:50:14,113 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-11-18 14:50:14,113 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-11-18 14:50:14,113 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:50:14,113 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-11-18 14:50:14,114 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-11-18 14:50:14,125 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 14:50:14,133 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-11-18 14:50:14,643 WARN L180 SmtUtils]: Spent 477.00 ms on a formula simplification. DAG size of input: 210 DAG size of output: 187 [2018-11-18 14:50:15,291 WARN L180 SmtUtils]: Spent 619.00 ms on a formula simplification. DAG size of input: 173 DAG size of output: 144 [2018-11-18 14:50:15,298 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 14:50:15,298 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 14:50:15,298 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 14:50:15,298 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 14:50:15,298 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-11-18 14:50:15,299 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:15,299 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 14:50:15,299 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 14:50:15,299 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 14:50:15,299 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 14:50:15,299 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 14:50:15,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,405 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,420 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,451 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,476 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,486 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,518 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,535 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,537 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,542 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,548 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,551 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,553 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,559 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,560 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,561 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,564 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,577 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,578 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,579 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,580 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,581 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,582 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,583 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,585 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,586 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,587 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,588 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,589 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,590 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:15,964 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 14:50:15,965 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:15,971 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 14:50:15,971 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 14:50:15,977 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 14:50:15,977 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~__cil_tmp7~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:15,997 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 14:50:15,997 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 14:50:15,999 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 14:50:15,999 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:16,023 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 14:50:16,023 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 14:50:16,036 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-11-18 14:50:16,037 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=-8, ~floorButtons_0~0=-8} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=-8, ~floorButtons_0~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:16,057 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-11-18 14:50:16,057 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_f197217f-ff01-4bc1-8a3e-dcf93394ece0/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:16,089 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-11-18 14:50:16,089 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-11-18 14:50:16,564 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-11-18 14:50:16,566 INFO L216 LassoAnalysis]: Preferences: [2018-11-18 14:50:16,566 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-11-18 14:50:16,566 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-11-18 14:50:16,567 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-11-18 14:50:16,567 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-11-18 14:50:16,567 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-11-18 14:50:16,567 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-11-18 14:50:16,567 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-11-18 14:50:16,567 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27_false-unreach-call_true-termination.cil.c_Iteration5_Loop [2018-11-18 14:50:16,567 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-11-18 14:50:16,567 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-11-18 14:50:16,571 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,588 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,593 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,609 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,641 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,644 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,646 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,651 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,692 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,736 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,767 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,821 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,823 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,829 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,854 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,856 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,857 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,879 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,887 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:16,906 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-11-18 14:50:17,335 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-11-18 14:50:17,340 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-11-18 14:50:17,341 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 14:50:17,343 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 14:50:17,343 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 14:50:17,343 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 14:50:17,343 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-11-18 14:50:17,343 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 14:50:17,350 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-11-18 14:50:17,350 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 14:50:17,356 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 14:50:17,358 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 14:50:17,358 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 14:50:17,359 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 14:50:17,359 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 14:50:17,359 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 14:50:17,359 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 14:50:17,359 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 14:50:17,360 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 14:50:17,361 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 14:50:17,361 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 14:50:17,361 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 14:50:17,362 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 14:50:17,362 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 14:50:17,362 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 14:50:17,362 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 14:50:17,362 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 14:50:17,362 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 14:50:17,363 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-11-18 14:50:17,363 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-11-18 14:50:17,363 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-11-18 14:50:17,363 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-11-18 14:50:17,363 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-11-18 14:50:17,363 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-11-18 14:50:17,364 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-11-18 14:50:17,368 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-11-18 14:50:17,368 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-11-18 14:50:17,371 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-11-18 14:50:17,377 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-11-18 14:50:17,377 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-11-18 14:50:17,378 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-11-18 14:50:17,379 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-11-18 14:50:17,379 INFO L518 LassoAnalysis]: Proved termination. [2018-11-18 14:50:17,379 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~3) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~3 Supporting invariants [] [2018-11-18 14:50:17,382 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-11-18 14:50:17,421 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-11-18 14:50:17,535 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:50:17,545 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 14:50:17,600 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-11-18 14:50:17,603 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-11-18 14:50:17,635 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-11-18 14:50:17,640 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-11-18 14:50:17,640 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 44225 states and 81375 transitions. cyclomatic complexity: 37151 Second operand 5 states. [2018-11-18 14:50:18,226 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 44225 states and 81375 transitions. cyclomatic complexity: 37151. Second operand 5 states. Result 54207 states and 99700 transitions. Complement of second has 8 states. [2018-11-18 14:50:18,227 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-11-18 14:50:18,227 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-11-18 14:50:18,238 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 12426 transitions. [2018-11-18 14:50:18,239 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12426 transitions. Stem has 164 letters. Loop has 50 letters. [2018-11-18 14:50:18,241 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 14:50:18,241 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12426 transitions. Stem has 214 letters. Loop has 50 letters. [2018-11-18 14:50:18,242 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 14:50:18,242 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 12426 transitions. Stem has 164 letters. Loop has 100 letters. [2018-11-18 14:50:18,243 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-11-18 14:50:18,244 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 54207 states and 99700 transitions. [2018-11-18 14:50:18,444 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 14:50:18,444 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 54207 states to 0 states and 0 transitions. [2018-11-18 14:50:18,444 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 14:50:18,444 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 14:50:18,444 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 14:50:18,444 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:50:18,444 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 14:50:18,445 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 14:50:18,445 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-11-18 14:50:18,445 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-11-18 14:50:18,445 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-11-18 14:50:18,445 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-11-18 14:50:18,445 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-11-18 14:50:18,445 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-11-18 14:50:18,445 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-11-18 14:50:18,445 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 14:50:18,445 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-11-18 14:50:18,446 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-11-18 14:50:18,446 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-11-18 14:50:18,446 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-11-18 14:50:18,446 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-11-18 14:50:18,446 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-11-18 14:50:18,446 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-11-18 14:50:18,452 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 18.11 02:50:18 BoogieIcfgContainer [2018-11-18 14:50:18,452 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-11-18 14:50:18,452 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-11-18 14:50:18,452 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-11-18 14:50:18,452 INFO L276 PluginConnector]: Witness Printer initialized [2018-11-18 14:50:18,453 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 18.11 02:49:37" (3/4) ... [2018-11-18 14:50:18,456 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-11-18 14:50:18,456 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-11-18 14:50:18,456 INFO L168 Benchmark]: Toolchain (without parser) took 50498.53 ms. Allocated memory was 1.0 GB in the beginning and 2.4 GB in the end (delta: 1.3 GB). Free memory was 956.6 MB in the beginning and 798.4 MB in the end (delta: 158.1 MB). Peak memory consumption was 1.5 GB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,457 INFO L168 Benchmark]: CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-11-18 14:50:18,457 INFO L168 Benchmark]: CACSL2BoogieTranslator took 556.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -161.5 MB). Peak memory consumption was 54.7 MB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,458 INFO L168 Benchmark]: Boogie Procedure Inliner took 198.01 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 64.4 MB). Peak memory consumption was 64.4 MB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,458 INFO L168 Benchmark]: Boogie Preprocessor took 224.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 990.6 MB in the end (delta: 63.0 MB). Peak memory consumption was 63.0 MB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,458 INFO L168 Benchmark]: RCFGBuilder took 8294.56 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 342.9 MB). Free memory was 990.6 MB in the beginning and 1.3 GB in the end (delta: -321.4 MB). Peak memory consumption was 521.5 MB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,459 INFO L168 Benchmark]: BuchiAutomizer took 41219.34 ms. Allocated memory was 1.5 GB in the beginning and 2.4 GB in the end (delta: 834.7 MB). Free memory was 1.3 GB in the beginning and 824.8 MB in the end (delta: 487.2 MB). Peak memory consumption was 1.3 GB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,459 INFO L168 Benchmark]: Witness Printer took 3.68 ms. Allocated memory is still 2.4 GB. Free memory was 824.8 MB in the beginning and 798.4 MB in the end (delta: 26.4 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. [2018-11-18 14:50:18,462 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.15 ms. Allocated memory is still 1.0 GB. Free memory is still 985.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 556.10 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 147.3 MB). Free memory was 956.6 MB in the beginning and 1.1 GB in the end (delta: -161.5 MB). Peak memory consumption was 54.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 198.01 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 64.4 MB). Peak memory consumption was 64.4 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 224.10 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 990.6 MB in the end (delta: 63.0 MB). Peak memory consumption was 63.0 MB. Max. memory is 11.5 GB. * RCFGBuilder took 8294.56 ms. Allocated memory was 1.2 GB in the beginning and 1.5 GB in the end (delta: 342.9 MB). Free memory was 990.6 MB in the beginning and 1.3 GB in the end (delta: -321.4 MB). Peak memory consumption was 521.5 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 41219.34 ms. Allocated memory was 1.5 GB in the beginning and 2.4 GB in the end (delta: 834.7 MB). Free memory was 1.3 GB in the beginning and 824.8 MB in the end (delta: 487.2 MB). Peak memory consumption was 1.3 GB. Max. memory is 11.5 GB. * Witness Printer took 3.68 ms. Allocated memory is still 2.4 GB. Free memory was 824.8 MB in the beginning and 798.4 MB in the end (delta: 26.4 MB). Peak memory consumption was 26.4 MB. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 6 terminating modules (5 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 5 modules have a trivial ranking function, the largest among these consists of 15 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 41.1s and 6 iterations. TraceHistogramMax:1. Analysis of lassos took 7.8s. Construction of modules took 25.1s. Büchi inclusion checks took 5.3s. Highest rank in rank-based complementation 3. Minimization of det autom 6. Minimization of nondet autom 0. Automata minimization 1.1s AutomataMinimizationTime, 4 MinimizatonAttempts, 21517 StatesRemovedByMinimization, 4 NontrivialMinimizations. Non-live state removal took 0.9s Buchi closure took 0.0s. Biggest automaton had 44225 states and ocurred in iteration 4. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 91865 SDtfs, 258900 SDslu, 282273 SDs, 0 SdLazy, 18383 SolverSat, 1617 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 25.1s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI4 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital211 mio100 ax100 hnf100 lsp20 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq216 hnf87 smp100 dnf118 smp100 tf102 neg97 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 15ms VariablesStem: 0 VariablesLoop: 4 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 3 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.5s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...