./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 35987657 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 --- Real Ultimate output --- This is Ultimate 0.2.2-?-3598765 [2022-07-22 02:28:28,813 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-22 02:28:28,815 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-22 02:28:28,847 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-22 02:28:28,848 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-22 02:28:28,849 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-22 02:28:28,852 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-22 02:28:28,854 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-22 02:28:28,855 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-22 02:28:28,864 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-22 02:28:28,866 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-22 02:28:28,869 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-22 02:28:28,869 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-22 02:28:28,871 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-22 02:28:28,872 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-22 02:28:28,874 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-22 02:28:28,874 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-22 02:28:28,876 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-22 02:28:28,877 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-22 02:28:28,881 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-22 02:28:28,882 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-22 02:28:28,883 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-22 02:28:28,884 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-22 02:28:28,885 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-22 02:28:28,886 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-22 02:28:28,891 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-22 02:28:28,891 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-22 02:28:28,892 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-22 02:28:28,892 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-22 02:28:28,893 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-22 02:28:28,893 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-22 02:28:28,893 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-22 02:28:28,895 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-22 02:28:28,895 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-22 02:28:28,896 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-22 02:28:28,897 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-22 02:28:28,897 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-22 02:28:28,898 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-22 02:28:28,898 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-22 02:28:28,898 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-22 02:28:28,899 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-22 02:28:28,899 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-22 02:28:28,904 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-22 02:28:28,929 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-22 02:28:28,930 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-22 02:28:28,930 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-22 02:28:28,930 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-22 02:28:28,931 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-22 02:28:28,931 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-22 02:28:28,932 INFO L138 SettingsManager]: * Use SBE=true [2022-07-22 02:28:28,932 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-22 02:28:28,932 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-22 02:28:28,933 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-22 02:28:28,933 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-22 02:28:28,933 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-22 02:28:28,933 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-22 02:28:28,933 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-22 02:28:28,933 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-22 02:28:28,934 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-22 02:28:28,935 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-22 02:28:28,935 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-22 02:28:28,935 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-22 02:28:28,935 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-22 02:28:28,935 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-22 02:28:28,935 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-22 02:28:28,936 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-22 02:28:28,936 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-22 02:28:28,936 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-22 02:28:28,937 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-22 02:28:28,938 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> ec740d4c0b0b941516a7691cfe22f258e1a0e4fdd205bb4a0c04151c297a8c86 [2022-07-22 02:28:29,231 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-22 02:28:29,261 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-22 02:28:29,262 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-22 02:28:29,263 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-22 02:28:29,264 INFO L275 PluginConnector]: CDTParser initialized [2022-07-22 02:28:29,264 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2022-07-22 02:28:29,331 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec01d6c92/fd3eac012e454bf79da11eac6b512998/FLAG2cfa75707 [2022-07-22 02:28:29,769 INFO L306 CDTParser]: Found 1 translation units. [2022-07-22 02:28:29,769 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c [2022-07-22 02:28:29,794 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec01d6c92/fd3eac012e454bf79da11eac6b512998/FLAG2cfa75707 [2022-07-22 02:28:30,111 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/ec01d6c92/fd3eac012e454bf79da11eac6b512998 [2022-07-22 02:28:30,113 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-22 02:28:30,114 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-22 02:28:30,116 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-22 02:28:30,116 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-22 02:28:30,119 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-22 02:28:30,119 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:30,120 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@6a5b4715 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30, skipping insertion in model container [2022-07-22 02:28:30,120 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:30,126 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-22 02:28:30,181 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-22 02:28:30,477 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c[33356,33369] [2022-07-22 02:28:30,619 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:28:30,632 INFO L203 MainTranslator]: Completed pre-run [2022-07-22 02:28:30,701 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product03.cil.c[33356,33369] [2022-07-22 02:28:30,754 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-22 02:28:30,783 INFO L208 MainTranslator]: Completed translation [2022-07-22 02:28:30,783 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30 WrapperNode [2022-07-22 02:28:30,783 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-22 02:28:30,784 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-22 02:28:30,784 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-22 02:28:30,785 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-22 02:28:30,789 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:30,836 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,163 INFO L137 Inliner]: procedures = 90, calls = 342, calls flagged for inlining = 195, calls inlined = 628, statements flattened = 20683 [2022-07-22 02:28:31,164 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-22 02:28:31,165 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-22 02:28:31,165 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-22 02:28:31,165 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-22 02:28:31,172 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,173 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,226 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,227 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,385 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,512 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,535 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,592 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-22 02:28:31,594 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-22 02:28:31,594 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-22 02:28:31,595 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-22 02:28:31,596 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (1/1) ... [2022-07-22 02:28:31,602 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:28:31,610 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:28:31,633 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:28:31,653 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-22 02:28:31,667 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-22 02:28:31,667 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-22 02:28:31,668 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-22 02:28:31,668 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-22 02:28:31,849 INFO L234 CfgBuilder]: Building ICFG [2022-07-22 02:28:31,850 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-22 02:28:37,056 INFO L275 CfgBuilder]: Performing block encoding [2022-07-22 02:28:37,100 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-22 02:28:37,100 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-22 02:28:37,109 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:28:37 BoogieIcfgContainer [2022-07-22 02:28:37,110 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-22 02:28:37,111 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-22 02:28:37,111 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-22 02:28:37,113 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-22 02:28:37,114 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:28:37,114 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 22.07 02:28:30" (1/3) ... [2022-07-22 02:28:37,115 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@27b6b3b0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:28:37, skipping insertion in model container [2022-07-22 02:28:37,115 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:28:37,116 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 22.07 02:28:30" (2/3) ... [2022-07-22 02:28:37,116 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@27b6b3b0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 22.07 02:28:37, skipping insertion in model container [2022-07-22 02:28:37,116 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-22 02:28:37,117 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 22.07 02:28:37" (3/3) ... [2022-07-22 02:28:37,118 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product03.cil.c [2022-07-22 02:28:37,209 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-22 02:28:37,209 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-22 02:28:37,209 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-22 02:28:37,209 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-22 02:28:37,210 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-22 02:28:37,210 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-22 02:28:37,210 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-22 02:28:37,210 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-22 02:28:37,231 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5953 states, 5952 states have (on average 1.8741599462365592) internal successors, (11155), 5952 states have internal predecessors, (11155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:37,329 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1206 [2022-07-22 02:28:37,330 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:28:37,330 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:28:37,343 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:37,344 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:37,344 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-22 02:28:37,355 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 5953 states, 5952 states have (on average 1.8741599462365592) internal successors, (11155), 5952 states have internal predecessors, (11155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:37,502 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1206 [2022-07-22 02:28:37,502 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:28:37,502 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:28:37,507 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:37,507 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:37,520 INFO L752 eck$LassoCheckResult]: Stem: 3654#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 5832#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 942#L1415true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1126#L1408true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 2796#L1423true main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 1724#L3392true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 731#L3369true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5220#L786true assume { :end_inline_initFloors } true; 3556#L1480true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 5285#L2983true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 4266#L3008true bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1812#L1064true assume 0 == initPersonOnFloor_~floor#1; 757#L1065true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 5511#L1172-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 893#L856true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2061#L868-2true assume { :end_inline_callOnFloor } true; 2148#L1208true assume { :end_inline_initPersonOnFloor } true; 126#L3119true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3711#L1640true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 270#L1692true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 3484#L542true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 2429#L604true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 3636#L1657-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2614#L1678-5true __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 4520#L608true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 354#L648true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5833#L793true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3147#L820true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5266#L2925true stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 3005#L2309true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5113#L1640-1true stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 3287#L2313true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3712#L2326true timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 5264#L2462true assume !(0 != timeShift_~tmp___9~3#1); 2149#L2553true assume !(1 == ~doorState~0); 4120#L2553-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2802#L793-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1663#L820-3true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 4132#L2925-1true stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 3708#L2192true assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1113#L1640-2true stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 5038#L2205true timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1939#L2561true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 4348#L2249true assume !(1 == ~currentHeading~0); 2716#L2259true assume !(0 == ~currentFloorID~0); 2065#L2259-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 844#L2265-1true assume { :end_inline_continueInDirection } true; 3441#L2570-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 3148#L673true assume !(-1 == ~expectedDirection~0); 2677#L685true assume !(1 == ~expectedDirection~0); 1394#L686true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1076#L2585true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2107#L1640-4true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 312#L1692-3true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 3185#L542-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 5323#L543-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 460#L1657-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5114#L1678-12true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 3956#L547-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 4178#L648-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 328#L793-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5254#L820-25true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1572#L2925-3true stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 3810#L2309-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5159#L1640-5true stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 1010#L2313-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5157#L2326-1true timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1274#L2462-2true assume !(0 != timeShift_~tmp___9~3#1); 5245#L2553-3true assume 1 == ~doorState~0;~doorState~0 := 0; 4524#L2553-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 4410#L793-28true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3753#L820-28true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2236#L2925-4true stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 5800#L2192-2true assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 663#L1640-6true stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 2553#L2205-2true timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 5887#L2561-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 637#L2249-3true assume !(1 == ~currentHeading~0); 3024#L2259-9true assume !(0 == ~currentFloorID~0); 499#L2259-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5060#L2265-7true assume { :end_inline_continueInDirection } true; 4680#L2570-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 345#L673-1true assume !(-1 == ~expectedDirection~0); 4211#L685-1true assume !(1 == ~expectedDirection~0); 4769#L686-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4900#L2585-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5890#L1640-8true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1292#L1692-6true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 2485#L542-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 1480#L543-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1889#L1657-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 5290#L1678-24true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 2907#L547-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 743#L648-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 2229#L793-50true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 2558#L820-50true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2117#L2925-6true stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 3679#L2309-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3934#L1640-9true stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 3372#L2313-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1648#L2326-2true timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1298#L2462-4true assume !(0 != timeShift_~tmp___9~3#1); 889#L2553-6true assume !(1 == ~doorState~0); 5661#L2553-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1048#L793-53true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3750#L820-53true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 4793#L2925-7true stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 2973#L2192-4true assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5455#L1640-10true stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 680#L2205-4true timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 332#L2561-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 4946#L2249-6true assume !(1 == ~currentHeading~0); 5498#L2259-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2683#L2259-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4172#L2265-13true assume { :end_inline_continueInDirection } true; 1030#L2570-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 4470#L673-2true assume !(-1 == ~expectedDirection~0); 1487#L685-2true assume !(1 == ~expectedDirection~0); 2314#L686-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 457#L2585-2true assume { :end_inline_timeShift } true; 3238#L3186true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 182#L2983-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 5179#L3008-1true bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 245#L1064-1true assume 0 == initPersonOnFloor_~floor#1; 4576#L1065-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 4064#L1172-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 5075#L856-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5349#L868-5true assume { :end_inline_callOnFloor } true; 4933#L1208-1true assume { :end_inline_initPersonOnFloor } true; 1701#L3119-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 32#L1640-12true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 3641#L1692-9true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 845#L542-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 3089#L543-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 41#L1657-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 2092#L1678-36true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 2198#L547-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1585#L648-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 431#L793-75true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 3471#L820-75true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 636#L2925-9true stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 3947#L2309-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 3149#L1640-13true stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 2512#L2313-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 4012#L2326-3true timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 4945#L2462-6true assume !(0 != timeShift_~tmp___9~3#1); 971#L2553-9true assume 1 == ~doorState~0;~doorState~0 := 0; 1180#L2553-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3922#L793-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1070#L820-78true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2922#L2925-10true stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 5199#L2192-6true assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1320#L1640-14true stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3073#L2205-6true timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 574#L2561-6true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 462#L2249-9true assume !(1 == ~currentHeading~0); 2348#L2259-27true assume !(0 == ~currentFloorID~0); 61#L2259-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3861#L2265-19true assume { :end_inline_continueInDirection } true; 3224#L2570-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 3049#L673-3true assume !(-1 == ~expectedDirection~0); 4092#L685-3true assume !(1 == ~expectedDirection~0); 2579#L686-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3899#L2585-3true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 5917#L3201-2true [2022-07-22 02:28:37,522 INFO L754 eck$LassoCheckResult]: Loop: 5917#L3201-2true assume !false; 543#L3202true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1001#L3205true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 3967#L1511true cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 3201#L3209true assume 1 != cleanup_~tmp___0~12#1; 861#L3209-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 3629#L793-100true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 571#L820-100true anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1102#L1748true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1860#L1812true isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1999#L1825true cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 2702#L3221true assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1819#L1640-16true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 5448#L1692-12true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 3263#L542-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 3623#L604-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 5742#L1657-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1843#L1678-53true __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 104#L608-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1429#L648-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5944#L793-105true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5775#L820-105true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5211#L2925-12true stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 2866#L2309-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1138#L1640-17true stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 1339#L2313-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5591#L2326-4true timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 4513#L2462-8true assume !(0 != timeShift_~tmp___9~3#1); 841#L2553-12true assume !(1 == ~doorState~0); 910#L2553-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 5736#L793-108true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 5504#L820-108true isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2693#L2925-13true stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 3303#L2192-8true assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1117#L1640-18true stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 3840#L2205-8true timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 2816#L2561-8true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1593#L2249-12true assume !(1 == ~currentHeading~0); 1062#L2259-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4222#L2259-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5915#L2265-25true assume { :end_inline_continueInDirection } true; 5920#L2570-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 5514#L673-4true assume !(-1 == ~expectedDirection~0); 3602#L685-4true assume !(1 == ~expectedDirection~0); 4159#L686-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 740#L2585-4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 5917#L3201-2true [2022-07-22 02:28:37,529 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:37,529 INFO L85 PathProgramCache]: Analyzing trace with hash -1087925455, now seen corresponding path program 1 times [2022-07-22 02:28:37,536 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:37,537 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2015276669] [2022-07-22 02:28:37,537 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:37,538 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:37,688 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:37,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:37,799 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:37,799 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2015276669] [2022-07-22 02:28:37,800 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2015276669] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:37,800 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:37,800 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:28:37,801 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261103414] [2022-07-22 02:28:37,802 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:37,804 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:28:37,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:37,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1191355982, now seen corresponding path program 1 times [2022-07-22 02:28:37,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:37,805 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1398908638] [2022-07-22 02:28:37,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:37,805 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:37,827 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:37,930 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:37,930 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:37,930 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1398908638] [2022-07-22 02:28:37,930 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1398908638] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:37,930 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:37,931 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-22 02:28:37,931 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [947408171] [2022-07-22 02:28:37,931 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:37,932 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:28:37,932 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:28:37,990 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-22 02:28:37,991 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-22 02:28:38,005 INFO L87 Difference]: Start difference. First operand has 5953 states, 5952 states have (on average 1.8741599462365592) internal successors, (11155), 5952 states have internal predecessors, (11155), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:45,021 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:28:45,021 INFO L93 Difference]: Finished difference Result 61988 states and 115760 transitions. [2022-07-22 02:28:45,022 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-22 02:28:45,026 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 61988 states and 115760 transitions. [2022-07-22 02:28:45,350 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 10635 [2022-07-22 02:28:45,602 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 61988 states to 61746 states and 115491 transitions. [2022-07-22 02:28:45,603 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 61746 [2022-07-22 02:28:45,677 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 61746 [2022-07-22 02:28:45,678 INFO L73 IsDeterministic]: Start isDeterministic. Operand 61746 states and 115491 transitions. [2022-07-22 02:28:45,752 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:28:45,752 INFO L369 hiAutomatonCegarLoop]: Abstraction has 61746 states and 115491 transitions. [2022-07-22 02:28:45,802 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 61746 states and 115491 transitions. [2022-07-22 02:28:46,332 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 61746 to 19648. [2022-07-22 02:28:46,358 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 19648 states, 19648 states have (on average 1.868638029315961) internal successors, (36715), 19647 states have internal predecessors, (36715), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:46,387 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 19648 states to 19648 states and 36715 transitions. [2022-07-22 02:28:46,388 INFO L392 hiAutomatonCegarLoop]: Abstraction has 19648 states and 36715 transitions. [2022-07-22 02:28:46,388 INFO L374 stractBuchiCegarLoop]: Abstraction has 19648 states and 36715 transitions. [2022-07-22 02:28:46,389 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-22 02:28:46,389 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 19648 states and 36715 transitions. [2022-07-22 02:28:46,437 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4421 [2022-07-22 02:28:46,437 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:28:46,438 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:28:46,440 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:46,441 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:46,441 INFO L752 eck$LassoCheckResult]: Stem: 73262#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 73263#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 70010#L1415 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 70011#L1408 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 70333#L1423 main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 71243#L3392 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 69633#L3369 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 69634#L786 assume { :end_inline_initFloors } true; 73199#L1480 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 73200#L2983 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 68988#L3008 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 71383#L1064 assume 0 == initPersonOnFloor_~floor#1; 69685#L1065 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68084#L1172-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 69927#L856 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 69928#L868-2 assume { :end_inline_callOnFloor } true; 71716#L1208 assume { :end_inline_initPersonOnFloor } true; 68313#L3119 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 68314#L1640 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 68648#L1692 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 68649#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 72138#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 72139#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 70613#L1678-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 72344#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 67990#L648 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 68846#L793 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 72858#L820 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 72859#L2925 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 72731#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 72733#L1640-1 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 72970#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 71111#L2326 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 73321#L2462 assume !(0 != timeShift_~tmp___9~3#1); 71813#L2553 assume !(1 == ~doorState~0); 71814#L2553-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 72527#L793-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 71166#L820-3 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 71167#L2925-1 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 73318#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 70314#L1640-2 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 70315#L2205 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 71552#L2561 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 71553#L2249 assume !(1 == ~currentHeading~0); 72448#L2259 assume !(0 == ~currentFloorID~0); 72449#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81833#L2265-1 assume { :end_inline_continueInDirection } true; 81832#L2570-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 81830#L673 assume !(-1 == ~expectedDirection~0); 81807#L685 assume !(1 == ~expectedDirection~0); 81801#L686 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 81800#L2585 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 81799#L1640-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 81797#L1692-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 81794#L542-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 81788#L543-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 81780#L1657-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 81762#L1678-12 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 81742#L547-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 81740#L648-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 81739#L793-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 76324#L820-25 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 81738#L2925-3 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 81737#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 81736#L1640-5 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 81735#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 70131#L2326-1 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 74064#L2462-2 assume !(0 != timeShift_~tmp___9~3#1); 74086#L2553-3 assume 1 == ~doorState~0;~doorState~0 := 0; 74087#L2553-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73751#L793-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 73752#L820-28 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 71913#L2925-4 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 71914#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 69498#L1640-6 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 69499#L2205-2 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 72280#L2561-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 74210#L2249-3 assume !(1 == ~currentHeading~0); 72749#L2259-9 assume !(0 == ~currentFloorID~0); 69168#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 69169#L2265-7 assume { :end_inline_continueInDirection } true; 71975#L2570-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 68823#L673-1 assume !(-1 == ~expectedDirection~0); 68622#L685-1 assume !(1 == ~expectedDirection~0); 84140#L686-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 82060#L2585-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 82059#L1640-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 82058#L1692-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 82056#L542-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 82054#L543-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 82055#L1657-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 82129#L1678-24 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 81875#L547-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 74770#L648-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 74768#L793-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74763#L820-50 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 74734#L2925-6 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 74716#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 74714#L1640-9 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 74700#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 70756#L2326-2 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 70617#L2462-4 assume !(0 != timeShift_~tmp___9~3#1); 69919#L2553-6 assume !(1 == ~doorState~0); 69920#L2553-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 70200#L793-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 70201#L820-53 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 73926#L2925-7 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 73927#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 74133#L1640-10 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 69530#L2205-4 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 68793#L2561-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 68795#L2249-6 assume !(1 == ~currentHeading~0); 74147#L2259-18 assume !(0 == ~currentFloorID~0); 72243#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 72418#L2265-13 assume { :end_inline_continueInDirection } true; 70169#L2570-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 70170#L673-2 assume !(-1 == ~expectedDirection~0); 70909#L685-2 assume !(1 == ~expectedDirection~0); 70911#L686-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 69071#L2585-2 assume { :end_inline_timeShift } true; 69072#L3186 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 68441#L2983-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 68442#L3008-1 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 68596#L1064-1 assume 0 == initPersonOnFloor_~floor#1; 68597#L1065-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 68667#L1172-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73569#L856-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 70749#L868-5 assume { :end_inline_callOnFloor } true; 73985#L1208-1 assume { :end_inline_initPersonOnFloor } true; 71216#L3119-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 68074#L1640-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 68075#L1692-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 69843#L542-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 69844#L543-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 68097#L1657-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 68098#L1678-36 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 71759#L547-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 69377#L648-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 69018#L793-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 69019#L820-75 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 69445#L2925-9 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 69446#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 73493#L1640-13 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 77694#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 72237#L2326-3 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 73532#L2462-6 assume !(0 != timeShift_~tmp___9~3#1); 73989#L2553-9 assume 1 == ~doorState~0;~doorState~0 := 0; 70430#L2553-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 70431#L793-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 70235#L820-78 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 70236#L2925-10 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 74074#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 74075#L1640-14 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 87565#L2205-6 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 69322#L2561-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 69082#L2249-9 assume !(1 == ~currentHeading~0); 69083#L2259-27 assume !(0 == ~currentFloorID~0); 68151#L2259-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 68152#L2265-19 assume { :end_inline_continueInDirection } true; 70741#L2570-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 85078#L673-3 assume !(-1 == ~expectedDirection~0); 85072#L685-3 assume !(1 == ~expectedDirection~0); 85069#L686-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 85066#L2585-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 85056#L3201-2 [2022-07-22 02:28:46,442 INFO L754 eck$LassoCheckResult]: Loop: 85056#L3201-2 assume !false; 85049#L3202 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 85046#L3205 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 85025#L1511 cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 84993#L3209 assume 1 != cleanup_~tmp___0~12#1; 84991#L3209-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 73243#L793-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 73244#L820-100 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 70291#L1748 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 68851#L1812 isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 84145#L1825 cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 83343#L3221 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 83222#L1640-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 82842#L1692-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 82840#L542-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 82838#L604-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 82839#L1657-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 82679#L1678-53 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 82666#L608-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 70823#L648-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 70824#L793-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74195#L820-105 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 74079#L2925-12 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 72588#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 70357#L1640-17 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 70358#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 70682#L2326-4 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 73801#L2462-8 assume !(0 != timeShift_~tmp___9~3#1); 69837#L2553-12 assume !(1 == ~doorState~0); 69838#L2553-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 74186#L793-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 74187#L820-108 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 72429#L2925-13 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 72430#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 70320#L1640-18 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 69802#L2205-8 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 72540#L2561-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 71070#L2249-12 assume !(1 == ~currentHeading~0); 70222#L2259-36 assume !(0 == ~currentFloorID~0); 70223#L2259-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 73646#L2265-25 assume { :end_inline_continueInDirection } true; 72924#L2570-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 85091#L673-4 assume !(-1 == ~expectedDirection~0); 85075#L685-4 assume !(1 == ~expectedDirection~0); 85070#L686-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 85067#L2585-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 85056#L3201-2 [2022-07-22 02:28:46,442 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:46,442 INFO L85 PathProgramCache]: Analyzing trace with hash 450414575, now seen corresponding path program 1 times [2022-07-22 02:28:46,443 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:46,443 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1360013918] [2022-07-22 02:28:46,443 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:46,443 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:46,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:46,661 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:46,662 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:46,662 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1360013918] [2022-07-22 02:28:46,662 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1360013918] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:46,662 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:46,662 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:28:46,662 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1200075753] [2022-07-22 02:28:46,662 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:46,663 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:28:46,663 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:46,663 INFO L85 PathProgramCache]: Analyzing trace with hash -2000702608, now seen corresponding path program 1 times [2022-07-22 02:28:46,664 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:46,664 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1952407415] [2022-07-22 02:28:46,664 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:46,664 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:46,672 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:46,693 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:46,694 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:46,694 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1952407415] [2022-07-22 02:28:46,694 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1952407415] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:46,694 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:46,694 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-22 02:28:46,695 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1631347859] [2022-07-22 02:28:46,695 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:46,695 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:28:46,695 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:28:46,696 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-22 02:28:46,696 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-22 02:28:46,696 INFO L87 Difference]: Start difference. First operand 19648 states and 36715 transitions. cyclomatic complexity: 17070 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:47,201 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:28:47,202 INFO L93 Difference]: Finished difference Result 33218 states and 61749 transitions. [2022-07-22 02:28:47,202 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-22 02:28:47,204 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 33218 states and 61749 transitions. [2022-07-22 02:28:47,325 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 8072 [2022-07-22 02:28:47,413 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 33218 states to 33218 states and 61749 transitions. [2022-07-22 02:28:47,413 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 33218 [2022-07-22 02:28:47,438 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 33218 [2022-07-22 02:28:47,438 INFO L73 IsDeterministic]: Start isDeterministic. Operand 33218 states and 61749 transitions. [2022-07-22 02:28:47,466 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:28:47,467 INFO L369 hiAutomatonCegarLoop]: Abstraction has 33218 states and 61749 transitions. [2022-07-22 02:28:47,482 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 33218 states and 61749 transitions. [2022-07-22 02:28:47,927 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 33218 to 32092. [2022-07-22 02:28:47,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 32092 states, 32092 states have (on average 1.8667269101333666) internal successors, (59907), 32091 states have internal predecessors, (59907), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:48,017 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32092 states to 32092 states and 59907 transitions. [2022-07-22 02:28:48,017 INFO L392 hiAutomatonCegarLoop]: Abstraction has 32092 states and 59907 transitions. [2022-07-22 02:28:48,017 INFO L374 stractBuchiCegarLoop]: Abstraction has 32092 states and 59907 transitions. [2022-07-22 02:28:48,017 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-22 02:28:48,017 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32092 states and 59907 transitions. [2022-07-22 02:28:48,296 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 7620 [2022-07-22 02:28:48,296 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:28:48,296 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:28:48,300 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:48,300 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:48,301 INFO L752 eck$LassoCheckResult]: Stem: 126325#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 126326#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 122901#L1415 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 122902#L1408 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 123227#L1423 main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 124164#L3392 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 122526#L3369 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 122527#L786 assume { :end_inline_initFloors } true; 126254#L1480 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 126255#L2983 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 121874#L3008 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 124310#L1064 assume 0 == initPersonOnFloor_~floor#1; 122572#L1065 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 120966#L1172-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 122818#L856 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 122819#L868-2 assume { :end_inline_callOnFloor } true; 124660#L1208 assume { :end_inline_initPersonOnFloor } true; 121197#L3119 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 121198#L1640 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 121532#L1692 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 121533#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 125115#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 125116#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 123511#L1678-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 125331#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 121728#L648 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 121729#L793 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 125879#L820 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 125880#L2925 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 125736#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 125738#L1640-1 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 125999#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 124024#L2326 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 126389#L2462 assume !(0 != timeShift_~tmp___9~3#1); 124765#L2553 assume !(1 == ~doorState~0); 124766#L2553-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 125521#L793-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 124082#L820-3 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 124083#L2925-1 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 126386#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 123208#L1640-2 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 123209#L2205 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 124486#L2561 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 124487#L2249 assume !(1 == ~currentHeading~0); 125442#L2259 assume !(0 == ~currentFloorID~0); 125443#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122732#L2265-1 assume { :end_inline_continueInDirection } true; 122052#L2570-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 125881#L673 assume !(-1 == ~expectedDirection~0); 121764#L685 assume !(1 == ~expectedDirection~0); 125403#L686 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 140934#L2585 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 124719#L1640-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 124720#L1692-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 131100#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 127861#L604-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 131090#L1657-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 131074#L1678-17 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 131066#L608-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 126745#L648-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 121667#L793-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 121668#L820-25 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 123952#L2925-3 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 123953#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 126477#L1640-5 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 127305#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 123024#L2326-1 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 131038#L2462-2 assume !(0 != timeShift_~tmp___9~3#1); 131037#L2553-3 assume 1 == ~doorState~0;~doorState~0 := 0; 131036#L2553-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 131035#L793-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 129339#L820-28 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 131005#L2925-4 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 130991#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 130990#L1640-6 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 130989#L2205-2 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 130987#L2561-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 130988#L2249-3 assume !(1 == ~currentHeading~0); 125757#L2259-9 assume !(0 == ~currentFloorID~0); 122058#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 122059#L2265-7 assume { :end_inline_continueInDirection } true; 136267#L2570-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 136265#L673-1 assume !(-1 == ~expectedDirection~0); 136262#L685-1 assume !(1 == ~expectedDirection~0); 136260#L686-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 136243#L2585-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 136206#L1640-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 136205#L1692-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 134632#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 134631#L604-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 134623#L1657-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 134620#L1678-29 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 134579#L608-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 134567#L648-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 134568#L793-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 132990#L820-50 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 132991#L2925-6 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 132984#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 132985#L1640-9 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 131131#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 123657#L2326-2 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 123515#L2462-4 assume !(0 != timeShift_~tmp___9~3#1); 122810#L2553-6 assume !(1 == ~doorState~0); 122811#L2553-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 123093#L793-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 123094#L820-53 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 126426#L2925-7 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 125696#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 125697#L1640-10 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 147589#L2205-4 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 121675#L2561-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 121677#L2249-6 assume !(1 == ~currentHeading~0); 127730#L2259-18 assume !(0 == ~currentFloorID~0); 144240#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 144239#L2265-13 assume { :end_inline_continueInDirection } true; 148632#L2570-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 148630#L673-2 assume !(-1 == ~expectedDirection~0); 148627#L685-2 assume !(1 == ~expectedDirection~0); 148625#L686-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 148624#L2585-2 assume { :end_inline_timeShift } true; 148623#L3186 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 148621#L2983-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 148616#L3008-1 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148612#L1064-1 assume 0 == initPersonOnFloor_~floor#1; 148586#L1065-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 148580#L1172-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 148579#L856-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 148496#L868-5 assume { :end_inline_callOnFloor } true; 127197#L1208-1 assume { :end_inline_initPersonOnFloor } true; 127198#L3119-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142873#L1640-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 142871#L1692-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 142870#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 139446#L604-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 142869#L1657-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 142872#L1678-41 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 142855#L608-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 142840#L648-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 142433#L793-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 133082#L820-75 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 142357#L2925-9 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 142350#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142351#L1640-13 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 147277#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 125220#L2326-3 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 126626#L2462-6 assume !(0 != timeShift_~tmp___9~3#1); 122959#L2553-9 assume 1 == ~doorState~0;~doorState~0 := 0; 122960#L2553-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 123326#L793-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 123130#L820-78 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 123131#L2925-10 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 125646#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 127320#L1640-14 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 125800#L2205-6 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 122212#L2561-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 122214#L2249-9 assume !(1 == ~currentHeading~0); 142496#L2259-27 assume !(0 == ~currentFloorID~0); 121034#L2259-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 121035#L2265-19 assume { :end_inline_continueInDirection } true; 151603#L2570-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 151601#L673-3 assume !(-1 == ~expectedDirection~0); 149363#L685-3 assume !(1 == ~expectedDirection~0); 149359#L686-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 149356#L2585-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 149355#L3201-2 [2022-07-22 02:28:48,301 INFO L754 eck$LassoCheckResult]: Loop: 149355#L3201-2 assume !false; 149354#L3202 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 142956#L3205 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 139406#L1511 cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 139394#L3209 assume 1 != cleanup_~tmp___0~12#1; 136244#L3209-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 136240#L793-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 136239#L820-100 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 133105#L1748 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 133093#L1812 isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 133089#L1825 cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 132983#L3221 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 131296#L1640-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 131294#L1692-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 131288#L542-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 131216#L604-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 131208#L1657-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 131203#L1678-53 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 131142#L608-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 131125#L648-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 131121#L793-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 131122#L820-105 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 131114#L2925-12 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 131115#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 131110#L1640-17 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 130899#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 123579#L2326-4 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 126963#L2462-8 assume !(0 != timeShift_~tmp___9~3#1); 122727#L2553-12 assume !(1 == ~doorState~0); 122728#L2553-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 122845#L793-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 127426#L820-108 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 125420#L2925-13 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 125421#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 126017#L1640-18 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 126502#L2205-8 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 125532#L2561-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 123981#L2249-12 assume !(1 == ~currentHeading~0); 123982#L2259-36 assume !(0 == ~currentFloorID~0); 126771#L2259-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 126772#L2265-25 assume { :end_inline_continueInDirection } true; 125953#L2570-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 127431#L673-4 assume !(-1 == ~expectedDirection~0); 125887#L685-4 assume !(1 == ~expectedDirection~0); 149358#L686-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 149357#L2585-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 149355#L3201-2 [2022-07-22 02:28:48,302 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:48,302 INFO L85 PathProgramCache]: Analyzing trace with hash 721721408, now seen corresponding path program 1 times [2022-07-22 02:28:48,302 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:48,302 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1608593203] [2022-07-22 02:28:48,303 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:48,303 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:48,322 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:48,351 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:48,351 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:48,351 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1608593203] [2022-07-22 02:28:48,352 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1608593203] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:48,352 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:48,352 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:28:48,352 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [915324446] [2022-07-22 02:28:48,352 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:48,353 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:28:48,353 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:48,353 INFO L85 PathProgramCache]: Analyzing trace with hash -225695246, now seen corresponding path program 1 times [2022-07-22 02:28:48,353 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:48,353 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [978954872] [2022-07-22 02:28:48,354 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:48,354 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:48,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:48,386 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:48,386 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:48,386 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [978954872] [2022-07-22 02:28:48,387 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [978954872] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:48,387 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:48,387 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:28:48,387 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005308227] [2022-07-22 02:28:48,387 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:48,387 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:28:48,387 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:28:48,388 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-22 02:28:48,388 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-22 02:28:48,388 INFO L87 Difference]: Start difference. First operand 32092 states and 59907 transitions. cyclomatic complexity: 27818 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:48,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:28:48,638 INFO L93 Difference]: Finished difference Result 50558 states and 94320 transitions. [2022-07-22 02:28:48,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-22 02:28:48,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50558 states and 94320 transitions. [2022-07-22 02:28:49,008 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11849 [2022-07-22 02:28:49,356 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50558 states to 50558 states and 94320 transitions. [2022-07-22 02:28:49,356 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50558 [2022-07-22 02:28:49,391 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50558 [2022-07-22 02:28:49,391 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50558 states and 94320 transitions. [2022-07-22 02:28:49,432 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:28:49,432 INFO L369 hiAutomatonCegarLoop]: Abstraction has 50558 states and 94320 transitions. [2022-07-22 02:28:49,454 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50558 states and 94320 transitions. [2022-07-22 02:28:49,969 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50558 to 49799. [2022-07-22 02:28:50,018 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 49799 states, 49799 states have (on average 1.867788509809434) internal successors, (93014), 49798 states have internal predecessors, (93014), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:28:50,111 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 49799 states to 49799 states and 93014 transitions. [2022-07-22 02:28:50,111 INFO L392 hiAutomatonCegarLoop]: Abstraction has 49799 states and 93014 transitions. [2022-07-22 02:28:50,111 INFO L374 stractBuchiCegarLoop]: Abstraction has 49799 states and 93014 transitions. [2022-07-22 02:28:50,111 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-22 02:28:50,112 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 49799 states and 93014 transitions. [2022-07-22 02:28:50,253 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11508 [2022-07-22 02:28:50,253 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:28:50,253 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:28:50,258 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:50,258 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:28:50,258 INFO L752 eck$LassoCheckResult]: Stem: 208872#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 208873#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 205550#L1415 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 205551#L1408 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 205881#L1423 main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 206805#L3392 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 205174#L3369 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 205175#L786 assume { :end_inline_initFloors } true; 208810#L1480 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 208811#L2983 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 204527#L3008 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 206942#L1064 assume 0 == initPersonOnFloor_~floor#1; 205221#L1065 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 203625#L1172-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 205468#L856 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 205469#L868-2 assume { :end_inline_callOnFloor } true; 207270#L1208 assume { :end_inline_initPersonOnFloor } true; 203856#L3119 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 203857#L1640 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 204190#L1692 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 204191#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 207708#L604 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 204095#L614 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 204096#L625 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 207116#L636 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 205453#L647 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 205455#L648 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 216633#L793 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 208450#L820 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 208451#L2925 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 208318#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 208320#L1640-1 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 208570#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 206668#L2326 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 208934#L2462 assume !(0 != timeShift_~tmp___9~3#1); 207374#L2553 assume !(1 == ~doorState~0); 207375#L2553-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 208108#L793-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 206725#L820-3 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 206726#L2925-1 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 208930#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 208932#L1640-2 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 209726#L2205 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 207106#L2561 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 207107#L2249 assume !(1 == ~currentHeading~0); 224147#L2259 assume !(0 == ~currentFloorID~0); 224145#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 224129#L2265-1 assume { :end_inline_continueInDirection } true; 224128#L2570-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 224125#L673 assume !(-1 == ~expectedDirection~0); 224124#L685 assume !(1 == ~expectedDirection~0); 224099#L686 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 223841#L2585 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 223836#L1640-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 223834#L1692-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 223833#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 209980#L604-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 223829#L614-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 223822#L625-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 223817#L636-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 223815#L647-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 223811#L648-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 223810#L793-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 220376#L820-25 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 223809#L2925-3 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 223806#L2309-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 223807#L1640-5 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 223808#L2313-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 205674#L2326-1 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 206132#L2462-2 assume !(0 != timeShift_~tmp___9~3#1); 206133#L2553-3 assume 1 == ~doorState~0;~doorState~0 := 0; 209796#L2553-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 223934#L793-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 223667#L820-28 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 223661#L2925-4 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 223658#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 223615#L1640-6 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 223614#L2205-2 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 223612#L2561-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 223613#L2249-3 assume !(1 == ~currentHeading~0); 213301#L2259-9 assume !(0 == ~currentFloorID~0); 209841#L2259-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 224127#L2265-7 assume { :end_inline_continueInDirection } true; 222707#L2570-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 222708#L673-1 assume !(-1 == ~expectedDirection~0); 220393#L685-1 assume !(1 == ~expectedDirection~0); 208200#L686-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 209600#L2585-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 210226#L1640-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 210223#L1692-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 207779#L542-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 206299#L604-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 206300#L614-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 208136#L625-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 205669#L636-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 204152#L647-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 221479#L648-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 221477#L793-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 219329#L820-50 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 221473#L2925-6 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 221470#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 221471#L1640-9 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 221506#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 221507#L2326-2 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 222186#L2462-4 assume !(0 != timeShift_~tmp___9~3#1); 222185#L2553-6 assume !(1 == ~doorState~0); 222184#L2553-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 222178#L793-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 210897#L820-53 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 222176#L2925-7 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 222174#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 222019#L1640-10 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 222015#L2205-4 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 222013#L2561-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 209687#L2249-6 assume !(1 == ~currentHeading~0); 209688#L2259-18 assume !(0 == ~currentFloorID~0); 207814#L2259-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 207996#L2265-13 assume { :end_inline_continueInDirection } true; 205713#L2570-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 205714#L673-2 assume !(-1 == ~expectedDirection~0); 246764#L685-2 assume !(1 == ~expectedDirection~0); 246760#L686-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 246759#L2585-2 assume { :end_inline_timeShift } true; 246758#L3186 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 246756#L2983-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 246751#L3008-1 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 246750#L1064-1 assume 0 == initPersonOnFloor_~floor#1; 246721#L1065-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 246715#L1172-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 246714#L856-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 246709#L868-5 assume { :end_inline_callOnFloor } true; 246708#L1208-1 assume { :end_inline_initPersonOnFloor } true; 241927#L3119-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 241926#L1640-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 241925#L1692-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 241924#L542-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 209110#L604-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 207313#L614-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 207061#L625-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 207063#L636-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 209945#L647-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 207437#L648-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 244231#L793-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 238725#L820-75 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 244223#L2925-9 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 244220#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 244222#L1640-13 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 248708#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 240092#L2326-3 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 240085#L2462-6 assume !(0 != timeShift_~tmp___9~3#1); 240086#L2553-9 assume 1 == ~doorState~0;~doorState~0 := 0; 250907#L2553-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 248737#L793-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 248735#L820-78 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 248729#L2925-10 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 248727#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 248570#L1640-14 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 248569#L2205-6 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 248568#L2561-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 204624#L2249-9 assume !(1 == ~currentHeading~0); 204625#L2259-27 assume !(0 == ~currentFloorID~0); 203692#L2259-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 203693#L2265-19 assume { :end_inline_continueInDirection } true; 206296#L2570-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 247536#L673-3 assume !(-1 == ~expectedDirection~0); 247537#L685-3 assume !(1 == ~expectedDirection~0); 207877#L686-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 207878#L2585-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 205191#L3201-2 [2022-07-22 02:28:50,259 INFO L754 eck$LassoCheckResult]: Loop: 205191#L3201-2 assume !false; 204801#L3202 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 204802#L3205 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 205655#L1511 cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 208497#L3209 assume 1 != cleanup_~tmp___0~12#1; 205412#L3209-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 205413#L793-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 204857#L820-100 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 204858#L1748 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 204389#L1812 isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 207012#L1825 cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 207191#L3221 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 206951#L1640-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 206952#L1692-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 208547#L542-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 208548#L604-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 203602#L614-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 203604#L625-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 209534#L636-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 206252#L647-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 203745#L648-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 206380#L793-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 209932#L820-105 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 209788#L2925-12 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 208172#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 208174#L1640-17 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 242963#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 229937#L2326-4 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 229933#L2462-8 assume !(0 != timeShift_~tmp___9~3#1); 229931#L2553-12 assume !(1 == ~doorState~0); 229929#L2553-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 229928#L793-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 229926#L820-108 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 229921#L2925-13 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 229918#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 229919#L1640-18 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 243536#L2205-8 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 243534#L2561-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 243281#L2249-12 assume !(1 == ~currentHeading~0); 210054#L2259-36 assume !(0 == ~currentFloorID~0); 208302#L2259-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 229777#L2265-25 assume { :end_inline_continueInDirection } true; 229776#L2570-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 229771#L673-4 assume !(-1 == ~expectedDirection~0); 229770#L685-4 assume !(1 == ~expectedDirection~0); 208840#L686-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 205190#L2585-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 205191#L3201-2 [2022-07-22 02:28:50,260 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:50,260 INFO L85 PathProgramCache]: Analyzing trace with hash 1478790254, now seen corresponding path program 1 times [2022-07-22 02:28:50,260 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:50,260 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1662395114] [2022-07-22 02:28:50,260 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:50,261 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:50,442 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:50,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:50,505 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:50,505 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1662395114] [2022-07-22 02:28:50,506 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1662395114] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:50,506 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:50,506 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:28:50,508 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1021868808] [2022-07-22 02:28:50,508 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:50,509 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:28:50,510 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:28:50,510 INFO L85 PathProgramCache]: Analyzing trace with hash 295763339, now seen corresponding path program 1 times [2022-07-22 02:28:50,511 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:28:50,511 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1253596765] [2022-07-22 02:28:50,512 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:28:50,512 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:28:50,538 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:28:50,921 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:28:50,921 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:28:50,921 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1253596765] [2022-07-22 02:28:50,921 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1253596765] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:28:50,922 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:28:50,922 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [19] imperfect sequences [] total 19 [2022-07-22 02:28:50,922 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2016866931] [2022-07-22 02:28:50,922 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:28:50,922 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:28:50,923 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:28:50,924 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 19 interpolants. [2022-07-22 02:28:50,924 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=44, Invalid=298, Unknown=0, NotChecked=0, Total=342 [2022-07-22 02:28:50,924 INFO L87 Difference]: Start difference. First operand 49799 states and 93014 transitions. cyclomatic complexity: 43218 Second operand has 19 states, 19 states have (on average 2.473684210526316) internal successors, (47), 19 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:15,006 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:15,006 INFO L93 Difference]: Finished difference Result 141645 states and 258025 transitions. [2022-07-22 02:29:15,007 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 175 states. [2022-07-22 02:29:15,007 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 141645 states and 258025 transitions. [2022-07-22 02:29:15,693 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 32892 [2022-07-22 02:29:16,202 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 141645 states to 141645 states and 258025 transitions. [2022-07-22 02:29:16,202 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 141645 [2022-07-22 02:29:16,325 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 141645 [2022-07-22 02:29:16,325 INFO L73 IsDeterministic]: Start isDeterministic. Operand 141645 states and 258025 transitions. [2022-07-22 02:29:16,451 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-22 02:29:16,451 INFO L369 hiAutomatonCegarLoop]: Abstraction has 141645 states and 258025 transitions. [2022-07-22 02:29:16,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 141645 states and 258025 transitions. [2022-07-22 02:29:17,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 141645 to 75440. [2022-07-22 02:29:17,471 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 75440 states, 75440 states have (on average 1.8468451749734889) internal successors, (139326), 75439 states have internal predecessors, (139326), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:17,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 75440 states to 75440 states and 139326 transitions. [2022-07-22 02:29:17,593 INFO L392 hiAutomatonCegarLoop]: Abstraction has 75440 states and 139326 transitions. [2022-07-22 02:29:17,593 INFO L374 stractBuchiCegarLoop]: Abstraction has 75440 states and 139326 transitions. [2022-07-22 02:29:17,593 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-22 02:29:17,594 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 75440 states and 139326 transitions. [2022-07-22 02:29:17,798 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 17276 [2022-07-22 02:29:17,798 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:17,798 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:17,803 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:17,803 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:17,803 INFO L752 eck$LassoCheckResult]: Stem: 400734#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 400735#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 397382#L1415 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 397383#L1408 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 397701#L1423 main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 398628#L3392 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 397012#L3369 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 397013#L786 assume { :end_inline_initFloors } true; 400665#L1480 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 400666#L2983 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 396383#L3008 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 398762#L1064 assume 0 == initPersonOnFloor_~floor#1; 397059#L1065 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 395488#L1172-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 397297#L856 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 397298#L868-2 assume { :end_inline_callOnFloor } true; 399093#L1208 assume { :end_inline_initPersonOnFloor } true; 395716#L3119 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 395717#L1640 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 396043#L1692 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 396044#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 399540#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 399541#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 397978#L1678-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 399748#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 398773#L648 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 410884#L793 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 410883#L820 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 401673#L2925 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 401674#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 410871#L1640-1 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 410868#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 410869#L2326 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 410857#L2462 assume !(0 != timeShift_~tmp___9~3#1); 410858#L2553 assume !(1 == ~doorState~0); 411649#L2553-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 411648#L793-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 411026#L820-3 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 411643#L2925-1 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 411640#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 411641#L1640-2 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 411656#L2205 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 411654#L2561 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 411655#L2249 assume !(1 == ~currentHeading~0); 413290#L2259 assume !(0 == ~currentFloorID~0); 413288#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 413286#L2265-1 assume { :end_inline_continueInDirection } true; 413279#L2570-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 411567#L673 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 411083#L1692-1 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 411100#L677 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 411005#L685 assume !(1 == ~expectedDirection~0); 406241#L686 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 406170#L2585 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 406169#L1640-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 406168#L1692-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 406167#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 401867#L604-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 406166#L614-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 432852#L625-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 432850#L636-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 432513#L647-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 432514#L648-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 449519#L793-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 413806#L820-25 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 449518#L2925-3 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 449517#L2309-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret70#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 396500#L793-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 396501#L820-27 stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1; 449501#L2282-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; 449502#L2294-3 stopRequestedAtCurrentFloor_#t~ret74#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret74#1;havoc stopRequestedAtCurrentFloor_#t~ret74#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 453388#L2326-1 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 453386#L2462-2 assume !(0 != timeShift_~tmp___9~3#1); 401660#L2553-3 assume 1 == ~doorState~0;~doorState~0 := 0; 401329#L2553-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 401330#L793-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 449490#L820-28 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 449489#L2925-4 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 449487#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 449485#L1640-6 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 449483#L2205-2 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 449480#L2561-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 449478#L2249-3 assume !(1 == ~currentHeading~0); 404546#L2259-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 403807#L2259-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 403803#L2265-7 assume { :end_inline_continueInDirection } true; 403801#L2570-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 403781#L673-1 assume !(-1 == ~expectedDirection~0); 403779#L685-1 assume !(1 == ~expectedDirection~0); 403771#L686-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 402665#L2585-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 402664#L1640-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 402663#L1692-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 402661#L542-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 402659#L543-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 402660#L1657-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 402672#L1678-24 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 402640#L547-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 402636#L648-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 402635#L793-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 402564#L820-50 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 402634#L2925-6 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 402628#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 402629#L1640-9 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 402688#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 402689#L2326-2 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 403028#L2462-4 assume !(0 != timeShift_~tmp___9~3#1); 403026#L2553-6 assume !(1 == ~doorState~0); 403020#L2553-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 403018#L793-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 403017#L820-53 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 403012#L2925-7 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 402868#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 402832#L1640-10 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 402831#L2205-4 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 402793#L2561-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 402794#L2249-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 401874#L1367-11 continueInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1; 399643#L2253-18 assume !(0 != continueInDirection_~tmp~11#1); 399645#L2259-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 413888#L2265-13 assume { :end_inline_continueInDirection } true; 413885#L2570-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 413883#L673-2 assume !(-1 == ~expectedDirection~0); 413882#L685-2 assume !(1 == ~expectedDirection~0); 413878#L686-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 413877#L2585-2 assume { :end_inline_timeShift } true; 413876#L3186 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 413874#L2983-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 413869#L3008-1 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 413867#L1064-1 assume 0 == initPersonOnFloor_~floor#1; 413839#L1065-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 413833#L1172-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 413832#L856-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 413827#L868-5 assume { :end_inline_callOnFloor } true; 413826#L1208-1 assume { :end_inline_initPersonOnFloor } true; 401927#L3119-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 401926#L1640-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 401925#L1692-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 401922#L542-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 400235#L543-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 395499#L1657-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 395500#L1678-36 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 399142#L547-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 396757#L648-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 409393#L793-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 409392#L820-75 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 409391#L2925-9 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 409389#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 409387#L1640-13 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 409388#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 408537#L2326-3 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 408530#L2462-6 assume !(0 != timeShift_~tmp___9~3#1); 408531#L2553-9 assume 1 == ~doorState~0;~doorState~0 := 0; 411846#L2553-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 411845#L793-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 411844#L820-78 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 411843#L2925-10 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 411841#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 411842#L1640-14 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 413551#L2205-6 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 413545#L2561-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 413546#L2249-9 assume !(1 == ~currentHeading~0); 416921#L2259-27 assume !(0 == ~currentFloorID~0); 416919#L2259-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 416183#L2265-19 assume { :end_inline_continueInDirection } true; 463437#L2570-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 463430#L673-3 assume !(-1 == ~expectedDirection~0); 463425#L685-3 assume !(1 == ~expectedDirection~0); 463417#L686-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 463415#L2585-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 463413#L3201-2 [2022-07-22 02:29:17,804 INFO L754 eck$LassoCheckResult]: Loop: 463413#L3201-2 assume !false; 463411#L3202 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 463409#L3205 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 432568#L1511 cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 432565#L3209 assume 1 != cleanup_~tmp___0~12#1; 432562#L3209-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 432558#L793-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 432552#L820-100 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 432539#L1748 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 432525#L1812 isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 432523#L1825 cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 417339#L3221 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 417338#L1640-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 417337#L1692-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 417336#L542-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 401939#L604-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 417331#L1657-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 417320#L1678-53 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 417285#L608-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 417255#L648-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 417254#L793-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 417204#L820-105 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 417253#L2925-12 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 417251#L2309-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 417250#L1640-17 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 417248#L2313-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 417249#L2326-4 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 427007#L2462-8 assume !(0 != timeShift_~tmp___9~3#1); 427008#L2553-12 assume !(1 == ~doorState~0); 455122#L2553-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 455123#L793-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 432844#L820-108 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 432845#L2925-13 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 432840#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 397686#L1640-18 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 397172#L2205-8 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 399956#L2561-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 399957#L2249-12 assume !(1 == ~currentHeading~0); 464933#L2259-36 assume !(0 == ~currentFloorID~0); 464926#L2259-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 415295#L2265-25 assume { :end_inline_continueInDirection } true; 464924#L2570-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 464186#L673-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 463434#L1692-13 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 463432#L677-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 463422#L685-4 assume !(1 == ~expectedDirection~0); 463418#L686-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 463416#L2585-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 463413#L3201-2 [2022-07-22 02:29:17,805 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:17,805 INFO L85 PathProgramCache]: Analyzing trace with hash -1676023785, now seen corresponding path program 1 times [2022-07-22 02:29:17,805 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:17,805 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [398111597] [2022-07-22 02:29:17,805 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:17,806 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:17,819 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:17,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:17,841 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:17,841 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [398111597] [2022-07-22 02:29:17,841 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [398111597] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:17,841 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:17,841 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-22 02:29:17,842 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1827870002] [2022-07-22 02:29:17,842 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:17,842 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:17,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:17,843 INFO L85 PathProgramCache]: Analyzing trace with hash 1721869207, now seen corresponding path program 1 times [2022-07-22 02:29:17,843 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:17,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [320088305] [2022-07-22 02:29:17,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:17,843 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:17,850 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 02:29:17,850 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-22 02:29:17,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-22 02:29:17,877 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-22 02:29:18,934 INFO L210 LassoAnalysis]: Preferences: [2022-07-22 02:29:18,934 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-22 02:29:18,934 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-22 02:29:18,934 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-22 02:29:18,935 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-07-22 02:29:18,935 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:18,935 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-22 02:29:18,935 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-22 02:29:18,935 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration5_Loop [2022-07-22 02:29:18,935 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-22 02:29:18,935 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-22 02:29:18,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,966 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,980 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,981 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,984 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,992 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:18,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,002 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,003 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,027 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,028 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,040 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,050 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,055 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,078 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:19,447 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-22 02:29:19,449 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-07-22 02:29:19,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,451 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,453 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,456 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-07-22 02:29:19,462 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,462 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,471 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,471 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,512 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,513 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,528 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,557 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-07-22 02:29:19,557 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,559 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,571 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,571 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret97#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret97#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,586 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2022-07-22 02:29:19,587 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,587 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,588 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,588 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-07-22 02:29:19,590 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,590 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,596 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,596 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret91#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret91#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,611 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-07-22 02:29:19,611 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,611 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,612 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,613 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-07-22 02:29:19,614 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,614 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,620 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,620 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~11#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,635 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Ended with exit code 0 [2022-07-22 02:29:19,635 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,636 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,636 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,637 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-07-22 02:29:19,638 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,638 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,644 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,644 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret34#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret34#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,659 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,660 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,660 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,661 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,663 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-07-22 02:29:19,670 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,670 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,690 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,690 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~12#1=0, ULTIMATE.start_isBlocked_#res#1=0} Honda state: {ULTIMATE.start_isBlocked_~retValue_acc~8#1=0, ULTIMATE.start_cleanup_~tmp___0~12#1=0, ULTIMATE.start_isBlocked_#res#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,722 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,722 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,722 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,731 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,732 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-07-22 02:29:19,733 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,733 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,743 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,743 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,758 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,758 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,758 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,759 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,760 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-07-22 02:29:19,761 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,761 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,767 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,767 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret68#1=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret68#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,782 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,783 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,783 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,784 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,785 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-07-22 02:29:19,786 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,786 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,798 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,798 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=-2, ULTIMATE.start_buttonForFloorIsPressed_#res#1=-2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~11#1=-2, ~floorButtons_0~0=-2} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=-2, ULTIMATE.start_buttonForFloorIsPressed_#res#1=-2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~11#1=-2, ~floorButtons_0~0=-2} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,815 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:19,816 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,816 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,817 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,817 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-07-22 02:29:19,818 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,818 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,827 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-22 02:29:19,827 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret46#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret46#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-22 02:29:19,842 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Ended with exit code 0 [2022-07-22 02:29:19,843 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,843 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,864 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,870 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-07-22 02:29:19,871 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-22 02:29:19,872 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:19,895 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2022-07-22 02:29:19,895 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:19,895 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:19,896 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:19,897 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-07-22 02:29:19,898 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-07-22 02:29:19,898 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-22 02:29:20,619 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-07-22 02:29:20,625 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:20,625 INFO L210 LassoAnalysis]: Preferences: [2022-07-22 02:29:20,625 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-22 02:29:20,626 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-22 02:29:20,626 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-22 02:29:20,626 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-07-22 02:29:20,626 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:20,626 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-22 02:29:20,626 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-22 02:29:20,626 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product03.cil.c_Iteration5_Loop [2022-07-22 02:29:20,626 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-22 02:29:20,626 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-22 02:29:20,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,637 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,644 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,645 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,650 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,656 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,677 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,685 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,689 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,691 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,693 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,695 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,699 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,713 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,716 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,739 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,744 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,784 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,798 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,801 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,814 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:20,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-22 02:29:21,371 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-22 02:29:21,374 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-07-22 02:29:21,375 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,375 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,376 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,377 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-07-22 02:29:21,379 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,384 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,385 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,385 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,385 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,385 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,386 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,386 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,392 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,407 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,407 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,408 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,408 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,409 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-07-22 02:29:21,410 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,415 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,415 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,415 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,416 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,416 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,416 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,416 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,417 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,432 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,432 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,432 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,433 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,434 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-07-22 02:29:21,435 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,440 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,440 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,440 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,440 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,440 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,441 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,441 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,446 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,461 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,461 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,461 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,463 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,464 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-07-22 02:29:21,464 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,469 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,469 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,470 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,470 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,470 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,472 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,472 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,473 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,487 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,488 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,488 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,489 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,489 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-07-22 02:29:21,491 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,495 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,496 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,496 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,496 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,496 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,496 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,496 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,497 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,512 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,513 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,513 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,514 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,516 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,521 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,521 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,521 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,521 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,521 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,522 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,522 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,522 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,534 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-07-22 02:29:21,538 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,538 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,538 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,542 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,544 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-07-22 02:29:21,544 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,549 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,549 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,550 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,550 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-22 02:29:21,550 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,550 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-22 02:29:21,550 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,569 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,586 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,586 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,586 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,587 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,589 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-07-22 02:29:21,590 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,595 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,595 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,595 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,595 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,595 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,596 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,596 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,610 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,626 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,627 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,627 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,628 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,628 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-07-22 02:29:21,630 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,635 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,636 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,636 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,636 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-22 02:29:21,636 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,638 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-22 02:29:21,638 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,640 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-22 02:29:21,657 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,657 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,657 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,658 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,659 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-07-22 02:29:21,660 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-22 02:29:21,665 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-22 02:29:21,666 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-22 02:29:21,666 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-22 02:29:21,666 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-22 02:29:21,666 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-22 02:29:21,668 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-22 02:29:21,668 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-22 02:29:21,671 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-07-22 02:29:21,711 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2022-07-22 02:29:21,711 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-07-22 02:29:21,712 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-22 02:29:21,712 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-22 02:29:21,737 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-22 02:29:21,803 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-07-22 02:29:21,804 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-07-22 02:29:21,804 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-07-22 02:29:21,804 INFO L513 LassoAnalysis]: Proved termination. [2022-07-22 02:29:21,805 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2022-07-22 02:29:21,837 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2022-07-22 02:29:21,839 INFO L293 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-07-22 02:29:21,854 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:21,998 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:22,002 INFO L263 TraceCheckSpWp]: Trace formula consists of 1149 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-22 02:29:22,011 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 02:29:22,169 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:22,170 INFO L263 TraceCheckSpWp]: Trace formula consists of 178 conjuncts, 8 conjunts are in the unsatisfiable core [2022-07-22 02:29:22,174 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-22 02:29:22,292 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:22,297 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2022-07-22 02:29:22,298 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 75440 states and 139326 transitions. cyclomatic complexity: 63890 Second operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:23,672 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 75440 states and 139326 transitions. cyclomatic complexity: 63890. Second operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 138795 states and 255844 transitions. Complement of second has 14 states. [2022-07-22 02:29:23,672 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 8 states 1 stem states 5 non-accepting loop states 1 accepting loop states [2022-07-22 02:29:23,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 7 states, 7 states have (on average 31.142857142857142) internal successors, (218), 7 states have internal predecessors, (218), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:23,688 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 8 states to 8 states and 15275 transitions. [2022-07-22 02:29:23,690 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 15275 transitions. Stem has 170 letters. Loop has 48 letters. [2022-07-22 02:29:23,695 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-22 02:29:23,695 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 15275 transitions. Stem has 218 letters. Loop has 48 letters. [2022-07-22 02:29:23,695 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-22 02:29:23,695 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 8 states and 15275 transitions. Stem has 170 letters. Loop has 96 letters. [2022-07-22 02:29:23,696 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-22 02:29:23,696 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 138795 states and 255844 transitions. [2022-07-22 02:29:25,534 INFO L131 ngComponentsAnalysis]: Automaton has 22 accepting balls. 37375 [2022-07-22 02:29:26,079 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 138795 states to 123823 states and 228227 transitions. [2022-07-22 02:29:26,079 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 98316 [2022-07-22 02:29:26,183 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 98336 [2022-07-22 02:29:26,184 INFO L73 IsDeterministic]: Start isDeterministic. Operand 123823 states and 228227 transitions. [2022-07-22 02:29:26,186 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-22 02:29:26,186 INFO L369 hiAutomatonCegarLoop]: Abstraction has 123823 states and 228227 transitions. [2022-07-22 02:29:26,263 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 123823 states and 228227 transitions. [2022-07-22 02:29:27,446 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 123823 to 120598. [2022-07-22 02:29:27,540 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120598 states, 120598 states have (on average 1.847393820793048) internal successors, (222792), 120597 states have internal predecessors, (222792), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:27,750 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120598 states to 120598 states and 222792 transitions. [2022-07-22 02:29:27,751 INFO L392 hiAutomatonCegarLoop]: Abstraction has 120598 states and 222792 transitions. [2022-07-22 02:29:27,751 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:27,751 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-22 02:29:27,751 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-22 02:29:27,752 INFO L87 Difference]: Start difference. First operand 120598 states and 222792 transitions. Second operand has 4 states, 4 states have (on average 42.5) internal successors, (170), 4 states have internal predecessors, (170), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:30,091 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:30,091 INFO L93 Difference]: Finished difference Result 360872 states and 666468 transitions. [2022-07-22 02:29:30,092 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2022-07-22 02:29:30,098 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 360872 states and 666468 transitions. [2022-07-22 02:29:32,306 INFO L131 ngComponentsAnalysis]: Automaton has 60 accepting balls. 106737 [2022-07-22 02:29:33,813 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 360872 states to 360872 states and 666468 transitions. [2022-07-22 02:29:33,814 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 286802 [2022-07-22 02:29:34,008 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 286802 [2022-07-22 02:29:34,008 INFO L73 IsDeterministic]: Start isDeterministic. Operand 360872 states and 666468 transitions. [2022-07-22 02:29:34,009 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is not deterministic. [2022-07-22 02:29:34,009 INFO L369 hiAutomatonCegarLoop]: Abstraction has 360872 states and 666468 transitions. [2022-07-22 02:29:34,182 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 360872 states and 666468 transitions. [2022-07-22 02:29:35,877 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 360872 to 120682. [2022-07-22 02:29:35,975 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 120682 states, 120682 states have (on average 1.8468039972821133) internal successors, (222876), 120681 states have internal predecessors, (222876), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:36,515 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120682 states to 120682 states and 222876 transitions. [2022-07-22 02:29:36,515 INFO L392 hiAutomatonCegarLoop]: Abstraction has 120682 states and 222876 transitions. [2022-07-22 02:29:36,515 INFO L374 stractBuchiCegarLoop]: Abstraction has 120682 states and 222876 transitions. [2022-07-22 02:29:36,515 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-22 02:29:36,515 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 120682 states and 222876 transitions. [2022-07-22 02:29:36,762 INFO L131 ngComponentsAnalysis]: Automaton has 20 accepting balls. 35579 [2022-07-22 02:29:36,763 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-22 02:29:36,763 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-22 02:29:36,770 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:36,770 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-22 02:29:36,770 INFO L752 eck$LassoCheckResult]: Stem: 1098300#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1098301#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret138#1, main_~retValue_acc~29#1, main_~tmp~25#1;havoc main_~retValue_acc~29#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 1094220#L1415 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1094221#L1408 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~7#1;havoc valid_product_~retValue_acc~7#1;valid_product_~retValue_acc~7#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~7#1; 1094611#L1423 main_#t~ret138#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret138#1;havoc main_#t~ret138#1; 1095733#L3392 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 1093775#L3369 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1093776#L786 assume { :end_inline_initFloors } true; 1098207#L1480 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 1098208#L2983 assume !(0 == getOrigin_~person#1); 1092988#L2987 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 1092989#L3008 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1098875#L1064 assume 0 == initPersonOnFloor_~floor#1; 1093830#L1065 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1091911#L1172-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1094126#L856 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1094127#L868-2 assume { :end_inline_callOnFloor } true; 1096301#L1208 assume { :end_inline_initPersonOnFloor } true; 1092188#L3119 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1092189#L1640 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1092580#L1692 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1092581#L542 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1096845#L604 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1096846#L1657-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1094960#L1678-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1097096#L608 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1095910#L648 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1100103#L793 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1100051#L820 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1100046#L2925 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 1100043#L2309 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1100019#L1640-1 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 1100016#L2313 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1100014#L2326 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1100011#L2462 assume !(0 != timeShift_~tmp___9~3#1); 1100004#L2553 assume !(1 == ~doorState~0); 1100002#L2553-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1099806#L793-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1099803#L820-3 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1099798#L2925-1 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1099793#L2192 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1099794#L1640-2 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1107557#L2205 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1107555#L2561 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1107556#L2249 assume !(1 == ~currentHeading~0); 1124699#L2259 assume !(0 == ~currentFloorID~0); 1124696#L2259-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1124686#L2265-1 assume { :end_inline_continueInDirection } true; 1124682#L2570-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1124535#L673 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1122611#L1692-1 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1122810#L677 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1122607#L685 assume !(1 == ~expectedDirection~0); 1122605#L686 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1122604#L2585 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1122603#L1640-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1122602#L1692-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1122601#L542-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1103919#L604-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1120673#L614-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1120671#L625-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1120669#L636-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1120667#L647-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1120665#L648-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1120663#L793-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1119087#L820-25 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1120660#L2925-3 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 1120657#L2309-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret70#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1120655#L793-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1120644#L820-27 stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1; 1123142#L2282-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; 1123140#L2294-3 stopRequestedAtCurrentFloor_#t~ret74#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret74#1;havoc stopRequestedAtCurrentFloor_#t~ret74#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1123138#L2326-1 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1123136#L2462-2 assume !(0 != timeShift_~tmp___9~3#1); 1123133#L2553-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1123132#L2553-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1123130#L793-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1106978#L820-28 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1123129#L2925-4 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1123128#L2192-2 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1122054#L1640-6 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1122053#L2205-2 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1122050#L2561-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1122051#L2249-3 assume !(1 == ~currentHeading~0); 1100284#L2259-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1099528#L2259-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1100270#L2265-7 assume { :end_inline_continueInDirection } true; 1100271#L2570-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1114883#L673-1 assume !(-1 == ~expectedDirection~0); 1114881#L685-1 assume !(1 == ~expectedDirection~0); 1114878#L686-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1114877#L2585-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1114876#L1640-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1114875#L1692-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1114873#L542-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 1114871#L543-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1114872#L1657-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1115667#L1678-24 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 1114851#L547-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1114847#L648-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1114846#L793-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1103023#L820-50 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1114845#L2925-6 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 1114843#L2309-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1114844#L1640-9 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 1114841#L2313-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1114842#L2326-2 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1118704#L2462-4 assume !(0 != timeShift_~tmp___9~3#1); 1118703#L2553-6 assume !(1 == ~doorState~0); 1118702#L2553-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1118696#L793-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1118694#L820-53 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1118648#L2925-7 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1118641#L2192-4 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1118638#L1640-10 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1118636#L2205-4 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1118629#L2561-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1099829#L2249-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~5#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~5#1;isTopFloor_~retValue_acc~5#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~5#1; 1099830#L1367-11 continueInDirection_#t~ret68#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~11#1 := continueInDirection_#t~ret68#1;havoc continueInDirection_#t~ret68#1; 1096976#L2253-18 assume !(0 != continueInDirection_~tmp~11#1); 1096978#L2259-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1104947#L2265-13 assume { :end_inline_continueInDirection } true; 1104935#L2570-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1104929#L673-2 assume !(-1 == ~expectedDirection~0); 1104927#L685-2 assume !(1 == ~expectedDirection~0); 1104856#L686-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1104852#L2585-2 assume { :end_inline_timeShift } true; 1104851#L3186 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret126#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~26#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~26#1; 1104850#L2983-1 assume !(0 == getOrigin_~person#1); 1104843#L2987-1 assume 1 == getOrigin_~person#1;getOrigin_~retValue_acc~26#1 := 3;getOrigin_#res#1 := getOrigin_~retValue_acc~26#1; 1104836#L3008-1 bobCall_#t~ret126#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret126#1;havoc bobCall_#t~ret126#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1104834#L1064-1 assume 0 == initPersonOnFloor_~floor#1; 1104808#L1065-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1104802#L1172-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1104801#L856-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1104796#L868-5 assume { :end_inline_callOnFloor } true; 1104795#L1208-1 assume { :end_inline_initPersonOnFloor } true; 1104794#L3119-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret132#1, cleanup_#t~ret133#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1104793#L1640-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1104792#L1692-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1104790#L542-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 1104789#L543-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1104778#L1657-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1104762#L1678-36 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 1104752#L547-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 1104747#L648-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1104737#L793-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1101977#L820-75 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1104728#L2925-9 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 1104724#L2309-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~13#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1104725#L1640-13 stopRequestedAtCurrentFloor_#t~ret72#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~8#1 := stopRequestedAtCurrentFloor_#t~ret72#1;havoc stopRequestedAtCurrentFloor_#t~ret72#1; 1104723#L2313-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~8#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1104722#L2326-3 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1104706#L2462-6 assume !(0 != timeShift_~tmp___9~3#1); 1104701#L2553-9 assume 1 == ~doorState~0;~doorState~0 := 0; 1104694#L2553-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1104691#L793-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1104685#L820-78 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1104684#L2925-10 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1104682#L2192-6 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1104683#L1640-14 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1110727#L2205-6 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1110726#L2561-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1100544#L2249-9 assume !(1 == ~currentHeading~0); 1100545#L2259-27 assume !(0 == ~currentFloorID~0); 1099667#L2259-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1156080#L2265-19 assume { :end_inline_continueInDirection } true; 1156081#L2570-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1156073#L673-3 assume !(-1 == ~expectedDirection~0); 1156074#L685-3 assume !(1 == ~expectedDirection~0); 1156061#L686-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1156062#L2585-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1156054#L3201-2 assume !false; 1156055#L3202 [2022-07-22 02:29:36,771 INFO L754 eck$LassoCheckResult]: Loop: 1156055#L3202 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1199110#L3205 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1199109#L1511 cleanup_#t~ret132#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret132#1;havoc cleanup_#t~ret132#1; 1199108#L3209 assume 1 != cleanup_~tmp___0~12#1; 1199107#L3209-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret53#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~8#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~8#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret48#1, anyStopRequested_#t~ret49#1, anyStopRequested_#t~ret50#1, anyStopRequested_#t~ret51#1, anyStopRequested_#t~ret52#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~7#1, anyStopRequested_~tmp___0~4#1, anyStopRequested_~tmp___1~3#1, anyStopRequested_~tmp___2~1#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~7#1;havoc anyStopRequested_~tmp___0~4#1;havoc anyStopRequested_~tmp___1~3#1;havoc anyStopRequested_~tmp___2~1#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1199102#L793-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1199100#L820-100 anyStopRequested_#t~ret48#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret48#1;havoc anyStopRequested_#t~ret48#1; 1199084#L1748 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1199075#L1812 isIdle_#t~ret53#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~8#1 := isIdle_#t~ret53#1;havoc isIdle_#t~ret53#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~8#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1199074#L1825 cleanup_#t~ret133#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret133#1;havoc cleanup_#t~ret133#1; 1199073#L3221 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret87#1, timeShift_#t~ret88#1, timeShift_#t~ret89#1, timeShift_#t~ret90#1, timeShift_#t~ret91#1, timeShift_#t~ret92#1, timeShift_#t~ret93#1, timeShift_#t~ret94#1, timeShift_#t~ret95#1, timeShift_#t~ret96#1, timeShift_#t~ret97#1, timeShift_~tmp~15#1, timeShift_~tmp___0~10#1, timeShift_~tmp___1~6#1, timeShift_~tmp___2~4#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~15#1;havoc timeShift_~tmp___0~10#1;havoc timeShift_~tmp___1~6#1;havoc timeShift_~tmp___2~4#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1199072#L1640-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1199067#L1692-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1199065#L542-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1188592#L604-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 1199036#L614-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 1199035#L625-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 1199034#L636-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 1199033#L647-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 1199032#L648-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1, stopRequestedAtCurrentFloor_#t~ret72#1, stopRequestedAtCurrentFloor_#t~ret73#1, stopRequestedAtCurrentFloor_#t~ret74#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~13#1, stopRequestedAtCurrentFloor_~tmp___0~8#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~13#1;havoc stopRequestedAtCurrentFloor_~tmp___0~8#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1199027#L793-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1181722#L820-105 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1199025#L2925-12 stopRequestedAtCurrentFloor_#t~ret71#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~13#1 := stopRequestedAtCurrentFloor_#t~ret71#1;havoc stopRequestedAtCurrentFloor_#t~ret71#1; 1199023#L2309-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~13#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__base } true;havoc stopRequestedAtCurrentFloor__wrappee__base_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1, stopRequestedAtCurrentFloor__wrappee__base_#t~ret70#1, stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1, stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp~12#1;havoc stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1199024#L793-107 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1199039#L820-107 stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1 := stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1;havoc stopRequestedAtCurrentFloor__wrappee__base_#t~ret69#1; 1199007#L2282-9 assume 0 != stopRequestedAtCurrentFloor__wrappee__base_~tmp___0~7#1;stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1 := 1;stopRequestedAtCurrentFloor__wrappee__base_#res#1 := stopRequestedAtCurrentFloor__wrappee__base_~retValue_acc~19#1; 1199006#L2294-9 stopRequestedAtCurrentFloor_#t~ret74#1 := stopRequestedAtCurrentFloor__wrappee__base_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__base } true;stopRequestedAtCurrentFloor_~retValue_acc~20#1 := stopRequestedAtCurrentFloor_#t~ret74#1;havoc stopRequestedAtCurrentFloor_#t~ret74#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1199004#L2326-4 timeShift_#t~ret87#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret87#1;havoc timeShift_#t~ret87#1; 1198998#L2462-8 assume !(0 != timeShift_~tmp___9~3#1); 1198996#L2553-12 assume !(1 == ~doorState~0); 1198995#L2553-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret65#1, stopRequestedInDirection_#t~ret66#1, stopRequestedInDirection_#t~ret67#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~10#1, stopRequestedInDirection_~tmp___0~6#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~10#1;havoc stopRequestedInDirection_~tmp___0~6#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret124#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~3#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~3#1; 1198994#L793-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~3#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~3#1; 1177057#L820-108 isExecutiveFloorCalling_#t~ret124#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret124#1;havoc isExecutiveFloorCalling_#t~ret124#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1198991#L2925-13 stopRequestedInDirection_#t~ret65#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~6#1 := stopRequestedInDirection_#t~ret65#1;havoc stopRequestedInDirection_#t~ret65#1; 1198989#L2192-8 assume 0 != stopRequestedInDirection_~tmp___0~6#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1198959#L1640-18 stopRequestedInDirection_#t~ret66#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~10#1 := stopRequestedInDirection_#t~ret66#1;havoc stopRequestedInDirection_#t~ret66#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~10#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1198956#L2205-8 timeShift_#t~ret94#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret94#1;havoc timeShift_#t~ret94#1; 1198953#L2561-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret68#1, continueInDirection_~dir#1, continueInDirection_~tmp~11#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~11#1;~currentHeading~0 := continueInDirection_~dir#1; 1198951#L2249-12 assume !(1 == ~currentHeading~0); 1198945#L2259-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1198946#L2259-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1199126#L2265-25 assume { :end_inline_continueInDirection } true; 1097857#L2570-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1199122#L673-4 assume !(-1 == ~expectedDirection~0); 1199123#L685-4 assume !(1 == ~expectedDirection~0); 1199114#L686-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1199112#L2585-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1199111#L3201-2 assume !false; 1156055#L3202 [2022-07-22 02:29:36,772 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:36,772 INFO L85 PathProgramCache]: Analyzing trace with hash -363249889, now seen corresponding path program 1 times [2022-07-22 02:29:36,773 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:36,773 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [824582573] [2022-07-22 02:29:36,773 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:36,773 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:36,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:36,818 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:36,818 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:36,819 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [824582573] [2022-07-22 02:29:36,819 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [824582573] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:36,819 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:36,819 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-22 02:29:36,819 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [840510526] [2022-07-22 02:29:36,819 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:36,820 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-22 02:29:36,820 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-22 02:29:36,820 INFO L85 PathProgramCache]: Analyzing trace with hash 185545409, now seen corresponding path program 1 times [2022-07-22 02:29:36,821 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-22 02:29:36,821 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [273779485] [2022-07-22 02:29:36,821 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-22 02:29:36,821 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-22 02:29:36,828 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-22 02:29:36,863 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-22 02:29:36,863 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-22 02:29:36,863 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [273779485] [2022-07-22 02:29:36,864 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [273779485] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-22 02:29:36,864 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-22 02:29:36,864 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2022-07-22 02:29:36,864 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1144087124] [2022-07-22 02:29:36,864 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-22 02:29:36,865 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-22 02:29:36,865 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-22 02:29:36,865 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2022-07-22 02:29:36,865 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=43, Unknown=0, NotChecked=0, Total=56 [2022-07-22 02:29:36,865 INFO L87 Difference]: Start difference. First operand 120682 states and 222876 transitions. cyclomatic complexity: 102226 Second operand has 8 states, 8 states have (on average 6.125) internal successors, (49), 8 states have internal predecessors, (49), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-22 02:29:45,609 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-22 02:29:45,609 INFO L93 Difference]: Finished difference Result 1085457 states and 2004420 transitions. [2022-07-22 02:29:45,609 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 36 states. [2022-07-22 02:29:45,610 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1085457 states and 2004420 transitions.