./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 6c24879c Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b --- Real Ultimate output --- This is Ultimate 0.2.2-?-6c24879 [2022-07-13 04:08:50,653 INFO L177 SettingsManager]: Resetting all preferences to default values... [2022-07-13 04:08:50,655 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2022-07-13 04:08:50,689 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2022-07-13 04:08:50,690 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2022-07-13 04:08:50,691 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2022-07-13 04:08:50,692 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2022-07-13 04:08:50,694 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2022-07-13 04:08:50,695 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2022-07-13 04:08:50,698 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2022-07-13 04:08:50,699 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2022-07-13 04:08:50,700 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2022-07-13 04:08:50,700 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2022-07-13 04:08:50,702 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2022-07-13 04:08:50,702 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2022-07-13 04:08:50,704 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2022-07-13 04:08:50,705 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2022-07-13 04:08:50,706 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2022-07-13 04:08:50,707 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2022-07-13 04:08:50,711 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2022-07-13 04:08:50,712 INFO L181 SettingsManager]: Resetting HornVerifier preferences to default values [2022-07-13 04:08:50,713 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2022-07-13 04:08:50,714 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2022-07-13 04:08:50,714 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2022-07-13 04:08:50,715 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2022-07-13 04:08:50,719 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2022-07-13 04:08:50,720 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2022-07-13 04:08:50,720 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2022-07-13 04:08:50,721 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2022-07-13 04:08:50,721 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2022-07-13 04:08:50,722 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2022-07-13 04:08:50,722 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2022-07-13 04:08:50,724 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2022-07-13 04:08:50,724 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2022-07-13 04:08:50,725 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2022-07-13 04:08:50,725 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2022-07-13 04:08:50,726 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2022-07-13 04:08:50,726 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2022-07-13 04:08:50,726 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2022-07-13 04:08:50,726 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2022-07-13 04:08:50,727 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2022-07-13 04:08:50,728 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2022-07-13 04:08:50,728 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2022-07-13 04:08:50,751 INFO L113 SettingsManager]: Loading preferences was successful [2022-07-13 04:08:50,752 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2022-07-13 04:08:50,752 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2022-07-13 04:08:50,752 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2022-07-13 04:08:50,753 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2022-07-13 04:08:50,753 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2022-07-13 04:08:50,753 INFO L138 SettingsManager]: * Use SBE=true [2022-07-13 04:08:50,754 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2022-07-13 04:08:50,754 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2022-07-13 04:08:50,754 INFO L138 SettingsManager]: * Use old map elimination=false [2022-07-13 04:08:50,754 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2022-07-13 04:08:50,755 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2022-07-13 04:08:50,755 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2022-07-13 04:08:50,755 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2022-07-13 04:08:50,755 INFO L138 SettingsManager]: * sizeof long=4 [2022-07-13 04:08:50,755 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2022-07-13 04:08:50,756 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2022-07-13 04:08:50,756 INFO L138 SettingsManager]: * sizeof POINTER=4 [2022-07-13 04:08:50,756 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2022-07-13 04:08:50,756 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * sizeof long double=12 [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * Use constant arrays=true [2022-07-13 04:08:50,757 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2022-07-13 04:08:50,758 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2022-07-13 04:08:50,758 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2022-07-13 04:08:50,758 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2022-07-13 04:08:50,758 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2022-07-13 04:08:50,759 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2022-07-13 04:08:50,759 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 79cd0e89b784c92aef5addf1ffd5f426704de99d9c0060c88cf4cdcbae792c3b [2022-07-13 04:08:50,925 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2022-07-13 04:08:50,938 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2022-07-13 04:08:50,940 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2022-07-13 04:08:50,941 INFO L271 PluginConnector]: Initializing CDTParser... [2022-07-13 04:08:50,941 INFO L275 PluginConnector]: CDTParser initialized [2022-07-13 04:08:50,942 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2022-07-13 04:08:51,005 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6aeb36119/b9c0c9528afe42ef9543467516193648/FLAG4b2bac0e8 [2022-07-13 04:08:51,505 INFO L306 CDTParser]: Found 1 translation units. [2022-07-13 04:08:51,505 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c [2022-07-13 04:08:51,531 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6aeb36119/b9c0c9528afe42ef9543467516193648/FLAG4b2bac0e8 [2022-07-13 04:08:52,025 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/6aeb36119/b9c0c9528afe42ef9543467516193648 [2022-07-13 04:08:52,027 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2022-07-13 04:08:52,028 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2022-07-13 04:08:52,029 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2022-07-13 04:08:52,029 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2022-07-13 04:08:52,031 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2022-07-13 04:08:52,032 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,032 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@75a24f89 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52, skipping insertion in model container [2022-07-13 04:08:52,033 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,037 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2022-07-13 04:08:52,069 INFO L178 MainTranslator]: Built tables and reachable declarations [2022-07-13 04:08:52,216 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2022-07-13 04:08:52,439 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 04:08:52,449 INFO L203 MainTranslator]: Completed pre-run [2022-07-13 04:08:52,459 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product11.cil.c[1545,1558] [2022-07-13 04:08:52,511 INFO L210 PostProcessor]: Analyzing one entry point: main [2022-07-13 04:08:52,526 INFO L208 MainTranslator]: Completed translation [2022-07-13 04:08:52,530 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52 WrapperNode [2022-07-13 04:08:52,533 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2022-07-13 04:08:52,534 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2022-07-13 04:08:52,534 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2022-07-13 04:08:52,534 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2022-07-13 04:08:52,539 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,554 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,727 INFO L137 Inliner]: procedures = 91, calls = 344, calls flagged for inlining = 197, calls inlined = 688, statements flattened = 21973 [2022-07-13 04:08:52,728 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2022-07-13 04:08:52,728 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2022-07-13 04:08:52,728 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2022-07-13 04:08:52,729 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2022-07-13 04:08:52,734 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,734 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,758 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,759 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,862 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,913 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:52,928 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:53,030 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2022-07-13 04:08:53,044 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2022-07-13 04:08:53,044 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2022-07-13 04:08:53,045 INFO L275 PluginConnector]: RCFGBuilder initialized [2022-07-13 04:08:53,045 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (1/1) ... [2022-07-13 04:08:53,050 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:08:53,073 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:08:53,113 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:08:53,173 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2022-07-13 04:08:53,208 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2022-07-13 04:08:53,208 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2022-07-13 04:08:53,208 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2022-07-13 04:08:53,208 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2022-07-13 04:08:53,390 INFO L234 CfgBuilder]: Building ICFG [2022-07-13 04:08:53,392 INFO L260 CfgBuilder]: Building CFG for each procedure with an implementation [2022-07-13 04:08:58,350 INFO L275 CfgBuilder]: Performing block encoding [2022-07-13 04:08:58,380 INFO L294 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2022-07-13 04:08:58,381 INFO L299 CfgBuilder]: Removed 1 assume(true) statements. [2022-07-13 04:08:58,384 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 04:08:58 BoogieIcfgContainer [2022-07-13 04:08:58,384 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2022-07-13 04:08:58,385 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2022-07-13 04:08:58,385 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2022-07-13 04:08:58,387 INFO L275 PluginConnector]: BuchiAutomizer initialized [2022-07-13 04:08:58,388 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:08:58,388 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 13.07 04:08:52" (1/3) ... [2022-07-13 04:08:58,388 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@79211d2f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.07 04:08:58, skipping insertion in model container [2022-07-13 04:08:58,388 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:08:58,389 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 13.07 04:08:52" (2/3) ... [2022-07-13 04:08:58,389 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@79211d2f and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 13.07 04:08:58, skipping insertion in model container [2022-07-13 04:08:58,389 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2022-07-13 04:08:58,389 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 04:08:58" (3/3) ... [2022-07-13 04:08:58,390 INFO L354 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product11.cil.c [2022-07-13 04:08:58,458 INFO L255 stractBuchiCegarLoop]: Interprodecural is true [2022-07-13 04:08:58,458 INFO L256 stractBuchiCegarLoop]: Hoare is false [2022-07-13 04:08:58,458 INFO L257 stractBuchiCegarLoop]: Compute interpolants for ForwardPredicates [2022-07-13 04:08:58,458 INFO L258 stractBuchiCegarLoop]: Backedges is STRAIGHT_LINE [2022-07-13 04:08:58,458 INFO L259 stractBuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2022-07-13 04:08:58,459 INFO L260 stractBuchiCegarLoop]: Difference is false [2022-07-13 04:08:58,459 INFO L261 stractBuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2022-07-13 04:08:58,459 INFO L265 stractBuchiCegarLoop]: ======== Iteration 0 == of CEGAR loop == BuchiAutomatonCegarLoop ======== [2022-07-13 04:08:58,473 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6223 states, 6222 states have (on average 1.8699774991963998) internal successors, (11635), 6222 states have internal predecessors, (11635), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:08:58,555 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1260 [2022-07-13 04:08:58,555 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:08:58,556 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:08:58,573 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:08:58,575 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:08:58,575 INFO L287 stractBuchiCegarLoop]: ======== Iteration 1 ============ [2022-07-13 04:08:58,586 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6223 states, 6222 states have (on average 1.8699774991963998) internal successors, (11635), 6222 states have internal predecessors, (11635), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:08:58,636 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1260 [2022-07-13 04:08:58,636 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:08:58,636 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:08:58,648 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:08:58,648 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:08:58,654 INFO L752 eck$LassoCheckResult]: Stem: 4996#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3003#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 1075#L3410true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 4116#L3403true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 3548#L3418true main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 5573#L1172true assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 3057#L1145true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1588#L2802true assume { :end_inline_initFloors } true; 4655#L1248true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 5543#L569true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 2254#L594true bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 424#L3080true assume 0 == initPersonOnFloor_~floor#1; 5018#L3081true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1450#L3188-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 3801#L2872true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 5325#L2884-2true assume { :end_inline_callOnFloor } true; 1559#L3224true assume { :end_inline_initPersonOnFloor } true; 4253#L894true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5548#L1428true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1799#L1480true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 5764#L670true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 4726#L732true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 977#L1445-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 3650#L1466-5true __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 4731#L736true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 4442#L776true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 238#L2809true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 2444#L2836true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1008#L2713true stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 2391#L2097true assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2555#L1428-1true stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 5379#L2101true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 3889#L2114true timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 62#L2250true assume !(0 != timeShift_~tmp___9~3#1); 4517#L2341true assume !(1 == ~doorState~0); 3179#L2341-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 3813#L2809-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3074#L2836-3true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5805#L2713-1true stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 2246#L1980true assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1527#L1428-2true stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1933#L1993true timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 50#L2349true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1348#L2037true assume !(1 == ~currentHeading~0); 3319#L2047true assume !(0 == ~currentFloorID~0); 402#L2047-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2869#L2053-1true assume { :end_inline_continueInDirection } true; 4192#L2358-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 525#L801true assume !(-1 == ~expectedDirection~0); 4633#L813true assume !(1 == ~expectedDirection~0); 3719#L814true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 999#L2373true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2111#L1428-4true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1992#L1480-3true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 3715#L670-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 5224#L671-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 925#L1445-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1001#L1466-12true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 2500#L675-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 5525#L776-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2101#L2809-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 4653#L2836-25true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 5216#L2713-3true stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 3582#L2097-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 918#L1428-5true stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 3124#L2101-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5788#L2114-1true timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1250#L2250-2true assume !(0 != timeShift_~tmp___9~3#1); 5171#L2341-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1113#L2341-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 4358#L2809-28true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 4844#L2836-28true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2991#L2713-4true stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 5193#L1980-2true assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5981#L1428-6true stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 5989#L1993-2true timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 5781#L2349-2true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 6022#L2037-3true assume !(1 == ~currentHeading~0); 2893#L2047-9true assume !(0 == ~currentFloorID~0); 4357#L2047-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 648#L2053-7true assume { :end_inline_continueInDirection } true; 4409#L2358-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 309#L801-1true assume !(-1 == ~expectedDirection~0); 2985#L813-1true assume !(1 == ~expectedDirection~0); 5983#L814-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3672#L2373-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5309#L1428-8true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 2216#L1480-6true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 5626#L670-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 4920#L671-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 4118#L1445-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 4998#L1466-24true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 3706#L675-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 4046#L776-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5082#L2809-50true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5744#L2836-50true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 904#L2713-6true stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 2880#L2097-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 457#L1428-9true stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1290#L2101-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1522#L2114-2true timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 3688#L2250-4true assume !(0 != timeShift_~tmp___9~3#1); 1153#L2341-6true assume !(1 == ~doorState~0); 2493#L2341-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1462#L2809-53true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 5903#L2836-53true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1817#L2713-7true stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1948#L1980-4true assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 629#L1428-10true stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 6087#L1993-4true timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 649#L2349-4true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 5870#L2037-6true assume !(1 == ~currentHeading~0); 5284#L2047-18true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1955#L2047-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 6169#L2053-13true assume { :end_inline_continueInDirection } true; 1951#L2358-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1824#L801-2true assume !(-1 == ~expectedDirection~0); 5120#L813-2true assume !(1 == ~expectedDirection~0); 5426#L814-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 3596#L2373-2true assume { :end_inline_timeShift } true; 2396#L961true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 3639#L569-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 224#L594-1true bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 4012#L3080-1true assume 0 == initPersonOnFloor_~floor#1; 6054#L3081-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 871#L3188-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 2931#L2872-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 3327#L2884-5true assume { :end_inline_callOnFloor } true; 6068#L3224-1true assume { :end_inline_initPersonOnFloor } true; 4755#L894-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2327#L1428-12true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 676#L1480-9true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 5458#L670-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 3761#L671-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 4182#L1445-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 4946#L1466-36true __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 2405#L675-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 2787#L776-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 2805#L2809-75true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3105#L2836-75true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3511#L2713-9true stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 2941#L2097-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5345#L1428-13true stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 5960#L2101-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5673#L2114-3true timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 5603#L2250-6true assume !(0 != timeShift_~tmp___9~3#1); 703#L2341-9true assume 1 == ~doorState~0;~doorState~0 := 0; 4729#L2341-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 4411#L2809-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1858#L2836-78true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1058#L2713-10true stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 4529#L1980-6true assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 111#L1428-14true stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1173#L1993-6true timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 6078#L2349-6true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 3265#L2037-9true assume !(1 == ~currentHeading~0); 4951#L2047-27true assume !(0 == ~currentFloorID~0); 892#L2047-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5722#L2053-19true assume { :end_inline_continueInDirection } true; 5987#L2358-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 3640#L801-3true assume !(-1 == ~expectedDirection~0); 5681#L813-3true assume !(1 == ~expectedDirection~0); 3897#L814-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1721#L2373-3true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 4320#L977-2true [2022-07-13 04:08:58,656 INFO L754 eck$LassoCheckResult]: Loop: 4320#L977-2true assume !false; 1878#L978true cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 4710#L981true assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 6166#L1279true cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 5218#L985true assume 1 != cleanup_~tmp___0~4#1; 5816#L985-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 5138#L2809-100true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1759#L2836-100true anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 2483#L1536true assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 5782#L1600true isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 4779#L1613true cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 1095#L997true assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 5780#L1428-16true __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 4136#L1480-12true __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 4128#L670-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1827#L732-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 4108#L1445-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 4336#L1466-53true __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 4454#L736-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 5222#L776-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1021#L2809-105true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 3711#L2836-105true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 2561#L2713-12true stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 4609#L2097-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 2740#L1428-17true stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 5660#L2101-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 5289#L2114-4true timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 3628#L2250-8true assume !(0 != timeShift_~tmp___9~3#1); 874#L2341-12true assume !(1 == ~doorState~0); 2360#L2341-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 4010#L2809-108true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 561#L2836-108true isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 3621#L2713-13true stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 4047#L1980-8true assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1258#L1428-18true stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1394#L1993-8true timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 5863#L2349-8true assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 4560#L2037-12true assume !(1 == ~currentHeading~0); 1481#L2047-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 886#L2047-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 5048#L2053-25true assume { :end_inline_continueInDirection } true; 811#L2358-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 4883#L801-4true assume !(-1 == ~expectedDirection~0); 2748#L813-4true assume !(1 == ~expectedDirection~0); 4678#L814-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 2054#L2373-4true assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 4320#L977-2true [2022-07-13 04:08:58,660 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:08:58,660 INFO L85 PathProgramCache]: Analyzing trace with hash 1838475505, now seen corresponding path program 1 times [2022-07-13 04:08:58,665 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:08:58,665 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2082726061] [2022-07-13 04:08:58,665 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:08:58,666 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:08:58,784 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:08:58,925 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:08:58,925 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:08:58,926 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2082726061] [2022-07-13 04:08:58,927 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2082726061] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:08:58,927 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:08:58,927 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:08:58,928 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1115161957] [2022-07-13 04:08:58,928 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:08:58,932 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:08:58,933 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:08:58,933 INFO L85 PathProgramCache]: Analyzing trace with hash -1521429342, now seen corresponding path program 1 times [2022-07-13 04:08:58,933 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:08:58,934 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [259803908] [2022-07-13 04:08:58,934 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:08:58,934 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:08:58,960 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:08:59,052 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:08:59,052 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:08:59,052 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [259803908] [2022-07-13 04:08:59,052 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [259803908] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:08:59,053 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:08:59,053 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2022-07-13 04:08:59,053 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [606856699] [2022-07-13 04:08:59,053 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:08:59,054 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:08:59,054 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:08:59,072 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2022-07-13 04:08:59,072 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2022-07-13 04:08:59,084 INFO L87 Difference]: Start difference. First operand has 6223 states, 6222 states have (on average 1.8699774991963998) internal successors, (11635), 6222 states have internal predecessors, (11635), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:05,634 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:05,634 INFO L93 Difference]: Finished difference Result 65282 states and 121616 transitions. [2022-07-13 04:09:05,659 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2022-07-13 04:09:05,664 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 65282 states and 121616 transitions. [2022-07-13 04:09:06,017 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 11175 [2022-07-13 04:09:06,271 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 65282 states to 65040 states and 121347 transitions. [2022-07-13 04:09:06,272 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 65040 [2022-07-13 04:09:06,339 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 65040 [2022-07-13 04:09:06,340 INFO L73 IsDeterministic]: Start isDeterministic. Operand 65040 states and 121347 transitions. [2022-07-13 04:09:06,413 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:06,413 INFO L369 hiAutomatonCegarLoop]: Abstraction has 65040 states and 121347 transitions. [2022-07-13 04:09:06,462 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 65040 states and 121347 transitions. [2022-07-13 04:09:06,984 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 65040 to 20620. [2022-07-13 04:09:07,022 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 20620 states, 20620 states have (on average 1.8643549951503395) internal successors, (38443), 20619 states have internal predecessors, (38443), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:07,051 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 20620 states to 20620 states and 38443 transitions. [2022-07-13 04:09:07,052 INFO L392 hiAutomatonCegarLoop]: Abstraction has 20620 states and 38443 transitions. [2022-07-13 04:09:07,053 INFO L374 stractBuchiCegarLoop]: Abstraction has 20620 states and 38443 transitions. [2022-07-13 04:09:07,053 INFO L287 stractBuchiCegarLoop]: ======== Iteration 2 ============ [2022-07-13 04:09:07,053 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 20620 states and 38443 transitions. [2022-07-13 04:09:07,234 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 4637 [2022-07-13 04:09:07,234 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:07,234 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:07,240 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:07,240 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:07,241 INFO L752 eck$LassoCheckResult]: Stem: 77763#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 76393#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 73821#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 73822#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 76867#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 76868#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 76438#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 74651#L2802 assume { :end_inline_initFloors } true; 74652#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 77620#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 72820#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 72567#L3080 assume 0 == initPersonOnFloor_~floor#1; 72568#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 71556#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 74443#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 72014#L2884-2 assume { :end_inline_callOnFloor } true; 74612#L3224 assume { :end_inline_initPersonOnFloor } true; 74613#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 77407#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 74975#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 74976#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 77655#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 73648#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 71979#L1466-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 76960#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 71657#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 72149#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 72150#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 78224#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 75743#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 75745#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 75926#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 74403#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 71716#L2250 assume !(0 != timeShift_~tmp___9~3#1); 71717#L2341 assume !(1 == ~doorState~0); 76561#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 76562#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 76452#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76453#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 75573#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 74559#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 74560#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 71683#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 71685#L2037 assume !(1 == ~currentHeading~0); 74279#L2047 assume !(0 == ~currentFloorID~0); 76686#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79142#L2053-1 assume { :end_inline_continueInDirection } true; 79141#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 79139#L801 assume !(-1 == ~expectedDirection~0); 79136#L813 assume !(1 == ~expectedDirection~0); 79134#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 79133#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 79132#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 79131#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 79129#L670-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 79130#L671-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 79150#L1445-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 79145#L1466-12 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 78798#L675-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 78687#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 78685#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 78676#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 78662#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 78652#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 78651#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 78650#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 76025#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 74111#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 74112#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 73885#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 73886#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 77700#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 77701#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 77848#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 77849#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 78064#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 78065#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 78071#L2037-3 assume !(1 == ~currentHeading~0); 76296#L2047-9 assume !(0 == ~currentFloorID~0); 76297#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 73033#L2053-7 assume { :end_inline_continueInDirection } true; 73034#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 88610#L801-1 assume !(-1 == ~expectedDirection~0); 88607#L813-1 assume !(1 == ~expectedDirection~0); 88605#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 86993#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 86992#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 86990#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 86987#L670-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 86985#L671-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 86986#L1445-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 86994#L1466-24 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 86972#L675-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 78840#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 78838#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 78832#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 78830#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 78680#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 78671#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 78672#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 74178#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 90824#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 90825#L2341-6 assume !(1 == ~doorState~0); 75853#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 75854#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 78045#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 78046#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 75195#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 75196#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 92099#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 92097#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 92098#L2037-6 assume !(1 == ~currentHeading~0); 77878#L2047-18 assume !(0 == ~currentFloorID~0); 75209#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 75210#L2053-13 assume { :end_inline_continueInDirection } true; 75200#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 75013#L801-2 assume !(-1 == ~expectedDirection~0); 75014#L813-2 assume !(1 == ~expectedDirection~0); 77818#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 76910#L2373-2 assume { :end_inline_timeShift } true; 75750#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 75751#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 72117#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 72118#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 77236#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 72688#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 73452#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 88612#L2884-5 assume { :end_inline_callOnFloor } true; 88604#L3224-1 assume { :end_inline_initPersonOnFloor } true; 77671#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 75661#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 73091#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 73092#L670-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 77049#L671-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 77050#L1445-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 87084#L1466-36 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 75763#L675-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 71714#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 76167#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 76187#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 76491#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 76347#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 76349#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 77902#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 78057#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 89702#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 73146#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 73147#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 77490#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 77491#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 73797#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 73798#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 71843#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 71844#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 73976#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 91903#L2037-9 assume !(1 == ~currentHeading~0); 77743#L2047-27 assume !(0 == ~currentFloorID~0); 72651#L2047-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 73485#L2053-19 assume { :end_inline_continueInDirection } true; 73022#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 76951#L801-3 assume !(-1 == ~expectedDirection~0); 75471#L813-3 assume !(1 == ~expectedDirection~0); 77150#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 74848#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 74849#L977-2 [2022-07-13 04:09:07,242 INFO L754 eck$LassoCheckResult]: Loop: 74849#L977-2 assume !false; 75090#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 75091#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 77643#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 77856#L985 assume 1 != cleanup_~tmp___0~4#1; 77857#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 78024#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 74907#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 74908#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 88615#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 88613#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 87256#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 87255#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 87254#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 87253#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 87251#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 87246#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 87230#L1466-48 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 87139#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 78690#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 78689#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 78677#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 78663#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 78653#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 76121#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 76122#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 71897#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 76935#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 76936#L2341-12 assume !(1 == ~doorState~0); 75705#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 75706#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 72866#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 72867#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 77270#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 77271#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 91955#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 91953#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 91952#L2037-12 assume !(1 == ~currentHeading~0); 74493#L2047-36 assume !(0 == ~currentFloorID~0); 73473#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 73474#L2053-25 assume { :end_inline_continueInDirection } true; 73348#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 73349#L801-4 assume !(-1 == ~expectedDirection~0); 76132#L813-4 assume !(1 == ~expectedDirection~0); 76133#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 75341#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 74849#L977-2 [2022-07-13 04:09:07,243 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:07,243 INFO L85 PathProgramCache]: Analyzing trace with hash -918151761, now seen corresponding path program 1 times [2022-07-13 04:09:07,243 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:07,243 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1905428483] [2022-07-13 04:09:07,243 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:07,244 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:07,282 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:07,329 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:07,330 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:07,331 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1905428483] [2022-07-13 04:09:07,332 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1905428483] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:07,332 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:07,332 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:07,333 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [480596859] [2022-07-13 04:09:07,334 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:07,334 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:07,335 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:07,336 INFO L85 PathProgramCache]: Analyzing trace with hash -258320123, now seen corresponding path program 1 times [2022-07-13 04:09:07,340 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:07,340 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1736241482] [2022-07-13 04:09:07,340 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:07,341 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:07,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:07,379 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:07,379 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:07,380 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1736241482] [2022-07-13 04:09:07,380 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1736241482] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:07,381 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:07,381 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:09:07,381 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [778329196] [2022-07-13 04:09:07,381 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:07,381 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:09:07,382 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:07,382 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:09:07,382 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:09:07,383 INFO L87 Difference]: Start difference. First operand 20620 states and 38443 transitions. cyclomatic complexity: 17826 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:07,895 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:07,895 INFO L93 Difference]: Finished difference Result 40809 states and 75772 transitions. [2022-07-13 04:09:07,896 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 04:09:07,896 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 40809 states and 75772 transitions. [2022-07-13 04:09:08,043 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9370 [2022-07-13 04:09:08,333 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 40809 states to 40809 states and 75772 transitions. [2022-07-13 04:09:08,333 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 40809 [2022-07-13 04:09:08,352 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 40809 [2022-07-13 04:09:08,353 INFO L73 IsDeterministic]: Start isDeterministic. Operand 40809 states and 75772 transitions. [2022-07-13 04:09:08,375 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:08,375 INFO L369 hiAutomatonCegarLoop]: Abstraction has 40809 states and 75772 transitions. [2022-07-13 04:09:08,387 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 40809 states and 75772 transitions. [2022-07-13 04:09:08,831 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 40809 to 39633. [2022-07-13 04:09:08,887 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 39633 states, 39633 states have (on average 1.863850831377892) internal successors, (73870), 39632 states have internal predecessors, (73870), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:09,098 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39633 states to 39633 states and 73870 transitions. [2022-07-13 04:09:09,106 INFO L392 hiAutomatonCegarLoop]: Abstraction has 39633 states and 73870 transitions. [2022-07-13 04:09:09,107 INFO L374 stractBuchiCegarLoop]: Abstraction has 39633 states and 73870 transitions. [2022-07-13 04:09:09,107 INFO L287 stractBuchiCegarLoop]: ======== Iteration 3 ============ [2022-07-13 04:09:09,107 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39633 states and 73870 transitions. [2022-07-13 04:09:09,184 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 8914 [2022-07-13 04:09:09,184 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:09,184 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:09,187 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:09,187 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:09,188 INFO L752 eck$LassoCheckResult]: Stem: 139455#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 137933#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 135280#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 135281#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 138450#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 138451#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 137983#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 136121#L2802 assume { :end_inline_initFloors } true; 136122#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 139272#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 134270#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 134015#L3080 assume 0 == initPersonOnFloor_~floor#1; 134016#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 133004#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 135911#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 133464#L2884-2 assume { :end_inline_callOnFloor } true; 136080#L3224 assume { :end_inline_initPersonOnFloor } true; 136081#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 139032#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 136448#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 136449#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 139316#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 135106#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 133429#L1466-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 138553#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 135509#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 140075#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 140073#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 140072#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 140066#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 140059#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 140057#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 140056#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 140053#L2250 assume !(0 != timeShift_~tmp___9~3#1); 140052#L2341 assume !(1 == ~doorState~0); 140051#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 140050#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 140046#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 140045#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 140043#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 140037#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 140038#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 140032#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 140034#L2037 assume !(1 == ~currentHeading~0); 138254#L2047 assume !(0 == ~currentFloorID~0); 138255#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 170293#L2053-1 assume { :end_inline_continueInDirection } true; 138990#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 134244#L801 assume !(-1 == ~expectedDirection~0); 134245#L813 assume !(1 == ~expectedDirection~0); 139259#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 145731#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 145551#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 145549#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 145547#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 145548#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 145534#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 145495#L1466-17 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 145480#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 145364#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 145360#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 145339#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 145270#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 145267#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 145266#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 144675#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 138054#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 163640#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 163638#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 163637#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 163636#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 163332#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 163630#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 163627#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 163583#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 163582#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 163580#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 163581#L2037-3 assume !(1 == ~currentHeading~0); 137831#L2047-9 assume !(0 == ~currentFloorID~0); 137832#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 134483#L2053-7 assume { :end_inline_continueInDirection } true; 134484#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 133768#L801-1 assume !(-1 == ~expectedDirection~0); 133769#L813-1 assume !(1 == ~expectedDirection~0); 137675#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 144671#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142780#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 142779#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 142773#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 142771#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 142772#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 142798#L1466-29 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 142709#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 142700#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 142698#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 141750#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 142697#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 142640#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142634#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 142632#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 142554#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 143491#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 142503#L2341-6 assume !(1 == ~doorState~0); 142496#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 142442#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 142440#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 142439#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 142437#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142438#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 146493#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 146491#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 146492#L2037-6 assume !(1 == ~currentHeading~0); 139604#L2047-18 assume !(0 == ~currentFloorID~0); 139061#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 158056#L2053-13 assume { :end_inline_continueInDirection } true; 171912#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 171911#L801-2 assume !(-1 == ~expectedDirection~0); 139529#L813-2 assume !(1 == ~expectedDirection~0); 139530#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 138499#L2373-2 assume { :end_inline_timeShift } true; 137251#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 137252#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 133565#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 133566#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 138850#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 134137#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 134908#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 134199#L2884-5 assume { :end_inline_callOnFloor } true; 146303#L3224-1 assume { :end_inline_initPersonOnFloor } true; 144607#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 142998#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 142955#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 140312#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 139404#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 134536#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 134402#L1466-41 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 134403#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 134588#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 140697#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 140511#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 140656#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 140603#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 140598#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 140596#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 140522#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 140462#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 140456#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 140454#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 140440#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 140437#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 140435#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 140432#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 140433#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 142863#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 142861#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 142862#L2037-9 assume !(1 == ~currentHeading~0); 154821#L2047-27 assume !(0 == ~currentFloorID~0); 154818#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 134942#L2053-19 assume { :end_inline_continueInDirection } true; 134473#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 138543#L801-3 assume !(-1 == ~expectedDirection~0); 136958#L813-3 assume !(1 == ~expectedDirection~0); 138754#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 136316#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 136317#L977-2 [2022-07-13 04:09:09,189 INFO L754 eck$LassoCheckResult]: Loop: 136317#L977-2 assume !false; 136565#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 136566#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 139304#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 139571#L985 assume 1 != cleanup_~tmp___0~4#1; 139572#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 139539#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 136378#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 136379#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 158030#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 158029#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 150489#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 149174#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 149172#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 149161#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 138960#L671-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 138961#L1445-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 148171#L1466-48 __utac_acc__Specification3_spec__1_#t~ret35#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~0#1 := __utac_acc__Specification3_spec__1_#t~ret35#1;havoc __utac_acc__Specification3_spec__1_#t~ret35#1; 148131#L675-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0#1;~expectedDirection~0 := 1; 148118#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 148108#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 148106#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 148105#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 148104#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 148103#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 148102#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 148101#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 148067#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 148054#L2341-12 assume !(1 == ~doorState~0); 148039#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 148031#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 148027#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 148023#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 148020#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 147924#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 147922#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 147918#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 147920#L2037-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 154785#L3383-21 continueInDirection_#t~ret82#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret82#1;havoc continueInDirection_#t~ret82#1; 154780#L2041-36 assume !(0 != continueInDirection_~tmp~21#1); 134929#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 134930#L2053-25 assume { :end_inline_continueInDirection } true; 134799#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 134800#L801-4 assume !(-1 == ~expectedDirection~0); 137654#L813-4 assume !(1 == ~expectedDirection~0); 137655#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 136826#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 136317#L977-2 [2022-07-13 04:09:09,190 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:09,190 INFO L85 PathProgramCache]: Analyzing trace with hash 1873115006, now seen corresponding path program 1 times [2022-07-13 04:09:09,190 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:09,190 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [342489573] [2022-07-13 04:09:09,191 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:09,191 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:09,206 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:09,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:09,246 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:09,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [342489573] [2022-07-13 04:09:09,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [342489573] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:09,247 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:09,247 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:09,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1261188344] [2022-07-13 04:09:09,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:09,248 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:09,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:09,248 INFO L85 PathProgramCache]: Analyzing trace with hash 1481191232, now seen corresponding path program 1 times [2022-07-13 04:09:09,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:09,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1906810987] [2022-07-13 04:09:09,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:09,249 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:09,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:09,281 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:09,281 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:09,281 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1906810987] [2022-07-13 04:09:09,282 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1906810987] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:09,282 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:09,282 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:09:09,282 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [443032974] [2022-07-13 04:09:09,282 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:09,282 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:09:09,282 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:09,283 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:09:09,283 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:09:09,283 INFO L87 Difference]: Start difference. First operand 39633 states and 73870 transitions. cyclomatic complexity: 34241 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:09,638 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:09,638 INFO L93 Difference]: Finished difference Result 59176 states and 110205 transitions. [2022-07-13 04:09:09,638 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:09:09,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59176 states and 110205 transitions. [2022-07-13 04:09:09,825 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 13405 [2022-07-13 04:09:09,975 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59176 states to 59176 states and 110205 transitions. [2022-07-13 04:09:09,975 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59176 [2022-07-13 04:09:10,010 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59176 [2022-07-13 04:09:10,010 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59176 states and 110205 transitions. [2022-07-13 04:09:10,232 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:10,232 INFO L369 hiAutomatonCegarLoop]: Abstraction has 59176 states and 110205 transitions. [2022-07-13 04:09:10,255 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59176 states and 110205 transitions. [2022-07-13 04:09:10,741 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59176 to 58304. [2022-07-13 04:09:10,817 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 58304 states, 58304 states have (on average 1.8644518386388584) internal successors, (108705), 58303 states have internal predecessors, (108705), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:10,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 58304 states to 58304 states and 108705 transitions. [2022-07-13 04:09:10,933 INFO L392 hiAutomatonCegarLoop]: Abstraction has 58304 states and 108705 transitions. [2022-07-13 04:09:10,933 INFO L374 stractBuchiCegarLoop]: Abstraction has 58304 states and 108705 transitions. [2022-07-13 04:09:10,933 INFO L287 stractBuchiCegarLoop]: ======== Iteration 4 ============ [2022-07-13 04:09:10,933 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 58304 states and 108705 transitions. [2022-07-13 04:09:11,091 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 13013 [2022-07-13 04:09:11,092 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:11,092 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:11,097 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:11,098 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:11,098 INFO L752 eck$LassoCheckResult]: Stem: 238201#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 236727#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 234102#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 234103#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 237236#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 237237#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 236773#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 234938#L2802 assume { :end_inline_initFloors } true; 234939#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 238037#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 233087#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 232832#L3080 assume 0 == initPersonOnFloor_~floor#1; 232833#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 231821#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 234732#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 232279#L2884-2 assume { :end_inline_callOnFloor } true; 234900#L3224 assume { :end_inline_initPersonOnFloor } true; 234901#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 237787#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 235262#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 235263#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 238074#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 233927#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 232244#L1466-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 237332#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 234335#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 238772#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 238773#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 239083#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 239079#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239075#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 239073#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 239072#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 239070#L2250 assume !(0 != timeShift_~tmp___9~3#1); 239065#L2341 assume !(1 == ~doorState~0); 239059#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 238733#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 238729#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 238727#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 238623#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 238625#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 238613#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 238614#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 238916#L2037 assume !(1 == ~currentHeading~0); 237039#L2047 assume !(0 == ~currentFloorID~0); 237040#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 252603#L2053-1 assume { :end_inline_continueInDirection } true; 252601#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 252598#L801 assume !(-1 == ~expectedDirection~0); 252595#L813 assume !(1 == ~expectedDirection~0); 250820#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 247098#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239273#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 239265#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 239254#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 239255#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 248604#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 248586#L1466-17 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 248572#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 248568#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 242948#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 242947#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 242946#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 242944#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 242943#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 242941#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 242942#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 250363#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 250361#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 250358#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 245945#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 245943#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 245940#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 245937#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 244801#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 244800#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 244798#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 244799#L2037-3 assume !(1 == ~currentHeading~0); 242357#L2047-9 assume !(0 == ~currentFloorID~0); 242345#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 242340#L2053-7 assume { :end_inline_continueInDirection } true; 242338#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 242335#L801-1 assume !(-1 == ~expectedDirection~0); 242332#L813-1 assume !(1 == ~expectedDirection~0); 242329#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 241581#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 241580#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 241579#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 241577#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 241576#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 240563#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 240561#L1466-29 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 240555#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 240548#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 240547#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 240546#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 240545#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 240541#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 240542#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 247742#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 240490#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 240476#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 240477#L2341-6 assume !(1 == ~doorState~0); 249990#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 249216#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 249215#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 249210#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 249069#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 249023#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 249020#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 249018#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 239261#L2037-6 assume !(1 == ~currentHeading~0); 238351#L2047-18 assume !(0 == ~currentFloorID~0); 237814#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 245172#L2053-13 assume { :end_inline_continueInDirection } true; 245170#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 245168#L801-2 assume !(-1 == ~expectedDirection~0); 245165#L813-2 assume !(1 == ~expectedDirection~0); 245163#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 245162#L2373-2 assume { :end_inline_timeShift } true; 245161#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 245159#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 240871#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 240870#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 240846#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 239711#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 239575#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 239569#L2884-5 assume { :end_inline_callOnFloor } true; 239565#L3224-1 assume { :end_inline_initPersonOnFloor } true; 239507#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239506#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 239505#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 239503#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 239501#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 239502#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 239513#L1466-41 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 239486#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 239482#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 239436#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 239435#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 239434#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 239432#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239433#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 239408#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 239409#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 239570#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 239563#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 239564#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 239560#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 239559#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 239558#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 239557#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 239281#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 239274#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 239275#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 263658#L2037-9 assume !(1 == ~currentHeading~0); 263500#L2047-27 assume !(0 == ~currentFloorID~0); 263494#L2047-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 263495#L2053-19 assume { :end_inline_continueInDirection } true; 268078#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 268075#L801-3 assume !(-1 == ~expectedDirection~0); 268069#L813-3 assume !(1 == ~expectedDirection~0); 268064#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 268061#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 268060#L977-2 [2022-07-13 04:09:11,099 INFO L754 eck$LassoCheckResult]: Loop: 268060#L977-2 assume !false; 268055#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 268053#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 268052#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 268051#L985 assume 1 != cleanup_~tmp___0~4#1; 268050#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 268049#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 268048#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 267992#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 267983#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 267982#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 267981#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 267980#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 267979#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 237700#L670-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1; 237701#L671-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0); 235102#L681-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 1); 236339#L692-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 2); 235475#L703-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 3); 235716#L714-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 4); 236392#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 263875#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 263874#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 263873#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 263870#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 263872#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 264810#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 232162#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 237306#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 237307#L2341-12 assume !(1 == ~doorState~0); 274487#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 274486#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 254454#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 274485#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 274483#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 273699#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 273698#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 273696#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 273488#L2037-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~27#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~27#1;isTopFloor_~retValue_acc~27#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~27#1; 275831#L3383-21 continueInDirection_#t~ret82#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~21#1 := continueInDirection_#t~ret82#1;havoc continueInDirection_#t~ret82#1; 275829#L2041-36 assume 0 != continueInDirection_~tmp~21#1;~currentHeading~0 := 0; 275828#L2047-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 268079#L2053-25 assume { :end_inline_continueInDirection } true; 268077#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 268072#L801-4 assume !(-1 == ~expectedDirection~0); 268066#L813-4 assume !(1 == ~expectedDirection~0); 268063#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 268062#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 268060#L977-2 [2022-07-13 04:09:11,099 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:11,100 INFO L85 PathProgramCache]: Analyzing trace with hash 1873115006, now seen corresponding path program 2 times [2022-07-13 04:09:11,100 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:11,100 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [854324025] [2022-07-13 04:09:11,100 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:11,100 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:11,119 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:11,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:11,150 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:11,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [854324025] [2022-07-13 04:09:11,150 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [854324025] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:11,151 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:11,151 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:11,151 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [683840346] [2022-07-13 04:09:11,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:11,152 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:11,152 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:11,152 INFO L85 PathProgramCache]: Analyzing trace with hash -92697234, now seen corresponding path program 1 times [2022-07-13 04:09:11,152 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:11,152 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [928958368] [2022-07-13 04:09:11,152 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:11,307 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:11,313 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:11,352 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:11,352 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:11,353 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [928958368] [2022-07-13 04:09:11,353 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [928958368] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:11,353 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:11,353 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2022-07-13 04:09:11,353 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669133391] [2022-07-13 04:09:11,353 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:11,354 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:09:11,354 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:11,355 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2022-07-13 04:09:11,355 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2022-07-13 04:09:11,355 INFO L87 Difference]: Start difference. First operand 58304 states and 108705 transitions. cyclomatic complexity: 50405 Second operand has 5 states, 5 states have (on average 9.6) internal successors, (48), 5 states have internal predecessors, (48), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:11,928 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:11,928 INFO L93 Difference]: Finished difference Result 84914 states and 158283 transitions. [2022-07-13 04:09:11,928 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2022-07-13 04:09:11,929 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 84914 states and 158283 transitions. [2022-07-13 04:09:12,181 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 19745 [2022-07-13 04:09:12,549 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 84914 states to 84874 states and 158211 transitions. [2022-07-13 04:09:12,549 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 84874 [2022-07-13 04:09:12,593 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 84874 [2022-07-13 04:09:12,594 INFO L73 IsDeterministic]: Start isDeterministic. Operand 84874 states and 158211 transitions. [2022-07-13 04:09:12,633 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:12,634 INFO L369 hiAutomatonCegarLoop]: Abstraction has 84874 states and 158211 transitions. [2022-07-13 04:09:12,665 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 84874 states and 158211 transitions. [2022-07-13 04:09:13,254 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 84874 to 84766. [2022-07-13 04:09:13,330 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 84766 states, 84766 states have (on average 1.864792487553972) internal successors, (158071), 84765 states have internal predecessors, (158071), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:13,461 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84766 states to 84766 states and 158071 transitions. [2022-07-13 04:09:13,462 INFO L392 hiAutomatonCegarLoop]: Abstraction has 84766 states and 158071 transitions. [2022-07-13 04:09:13,462 INFO L374 stractBuchiCegarLoop]: Abstraction has 84766 states and 158071 transitions. [2022-07-13 04:09:13,462 INFO L287 stractBuchiCegarLoop]: ======== Iteration 5 ============ [2022-07-13 04:09:13,462 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 84766 states and 158071 transitions. [2022-07-13 04:09:13,838 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 19729 [2022-07-13 04:09:13,839 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:13,839 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:13,843 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:13,843 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:13,843 INFO L752 eck$LassoCheckResult]: Stem: 381363#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 379929#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 377331#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 377332#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 380427#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 380428#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 379978#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 378165#L2802 assume { :end_inline_initFloors } true; 378166#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 381211#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 376321#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 376070#L3080 assume 0 == initPersonOnFloor_~floor#1; 376071#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 375057#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 377958#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 375517#L2884-2 assume { :end_inline_callOnFloor } true; 378126#L3224 assume { :end_inline_initPersonOnFloor } true; 378127#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 380984#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 378488#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 378489#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 381244#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 377153#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 375482#L1466-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 380529#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 377561#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 375653#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 375654#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 382266#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 382262#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 382258#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 382256#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 382255#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 382253#L2250 assume !(0 != timeShift_~tmp___9~3#1); 382252#L2341 assume !(1 == ~doorState~0); 382251#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 382250#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 381989#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 381847#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 381848#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 381753#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 381754#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 381746#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 377790#L2037 assume !(1 == ~currentHeading~0); 377791#L2047 assume !(0 == ~currentFloorID~0); 376021#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 376022#L2053-1 assume { :end_inline_continueInDirection } true; 379800#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 387122#L801 assume !(-1 == ~expectedDirection~0); 387114#L813 assume !(1 == ~expectedDirection~0); 387111#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 387072#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 387071#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 387070#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 387068#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 387067#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 387057#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 387040#L1466-17 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 387031#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 387027#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 387026#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 386035#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 386974#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 386966#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 386964#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 386961#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 386962#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 407217#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 407216#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 407215#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 407214#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 390209#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 407198#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 407178#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 407179#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 411775#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 411774#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 381703#L2037-3 assume !(1 == ~currentHeading~0); 379832#L2047-9 assume !(0 == ~currentFloorID~0); 379833#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 384787#L2053-7 assume { :end_inline_continueInDirection } true; 384785#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 384783#L801-1 assume !(-1 == ~expectedDirection~0); 384780#L813-1 assume !(1 == ~expectedDirection~0); 384778#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 384777#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 384776#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 384775#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 384774#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 384772#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 384773#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 385290#L1466-29 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 384668#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 384660#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 384213#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 384212#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 384211#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 384209#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 384210#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 384207#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 384208#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 391541#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 391540#L2341-6 assume !(1 == ~doorState~0); 391539#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 391538#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 391144#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 391537#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 391535#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 391536#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 382455#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 382456#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 390936#L2037-6 assume !(1 == ~currentHeading~0); 381498#L2047-18 assume !(0 == ~currentFloorID~0); 381499#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 383264#L2053-13 assume { :end_inline_continueInDirection } true; 383263#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 383261#L801-2 assume !(-1 == ~expectedDirection~0); 383257#L813-2 assume !(1 == ~expectedDirection~0); 383255#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 383254#L2373-2 assume { :end_inline_timeShift } true; 383253#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 383220#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 383215#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 383214#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 383194#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 383180#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 383179#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 383174#L2884-5 assume { :end_inline_callOnFloor } true; 383140#L3224-1 assume { :end_inline_initPersonOnFloor } true; 383135#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 383125#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 383121#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 383116#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 383108#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 382972#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 382924#L1466-41 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 382914#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 382905#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 382903#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 382820#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 382898#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 382890#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 382891#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 382899#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 382900#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 392796#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 392795#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 392794#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 392641#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 392642#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 392828#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 392826#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 392827#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 383701#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 383702#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 396178#L2037-9 assume !(1 == ~currentHeading~0); 381338#L2047-27 assume !(0 == ~currentFloorID~0); 381339#L2047-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 440420#L2053-19 assume { :end_inline_continueInDirection } true; 440416#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 440410#L801-3 assume !(-1 == ~expectedDirection~0); 440404#L813-3 assume !(1 == ~expectedDirection~0); 440401#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 440399#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 440396#L977-2 [2022-07-13 04:09:13,844 INFO L754 eck$LassoCheckResult]: Loop: 440396#L977-2 assume !false; 440389#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 440388#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 435465#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 435389#L985 assume 1 != cleanup_~tmp___0~4#1; 435384#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 435379#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 435364#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 434030#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 434016#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 434014#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 433566#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 433565#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 430106#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 414498#L670-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 378532#L732-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 378533#L1445-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 377834#L1466-53 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 381023#L736-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 412379#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 412378#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 412377#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 412376#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 412374#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 412375#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 413359#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 413360#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 413659#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 413658#L2341-12 assume !(1 == ~doorState~0); 413657#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 413656#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 412200#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 413655#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 413654#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 412053#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 412051#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 412048#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 412049#L2037-12 assume !(1 == ~currentHeading~0); 378005#L2047-36 assume !(0 == ~currentFloorID~0); 378006#L2047-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 440425#L2053-25 assume { :end_inline_continueInDirection } true; 440418#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 440413#L801-4 assume !(-1 == ~expectedDirection~0); 440407#L813-4 assume !(1 == ~expectedDirection~0); 440402#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 440400#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 440396#L977-2 [2022-07-13 04:09:13,844 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:13,844 INFO L85 PathProgramCache]: Analyzing trace with hash -646844928, now seen corresponding path program 1 times [2022-07-13 04:09:13,844 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:13,844 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [265264891] [2022-07-13 04:09:13,845 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:13,845 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:13,856 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:13,875 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:13,875 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:13,875 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [265264891] [2022-07-13 04:09:13,876 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [265264891] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:13,876 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:13,876 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:13,876 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1584358978] [2022-07-13 04:09:13,876 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:13,876 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:13,877 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:13,877 INFO L85 PathProgramCache]: Analyzing trace with hash -555768606, now seen corresponding path program 1 times [2022-07-13 04:09:13,877 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:13,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1246528118] [2022-07-13 04:09:13,877 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:13,877 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:13,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:13,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:13,891 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:13,892 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1246528118] [2022-07-13 04:09:13,892 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1246528118] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:13,892 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:13,892 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2022-07-13 04:09:13,892 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [32570982] [2022-07-13 04:09:13,892 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:13,892 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:09:13,893 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:13,893 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2022-07-13 04:09:13,893 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2022-07-13 04:09:13,893 INFO L87 Difference]: Start difference. First operand 84766 states and 158071 transitions. cyclomatic complexity: 73309 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:14,454 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:14,454 INFO L93 Difference]: Finished difference Result 104654 states and 194950 transitions. [2022-07-13 04:09:14,454 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2022-07-13 04:09:14,455 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 104654 states and 194950 transitions. [2022-07-13 04:09:14,810 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 24374 [2022-07-13 04:09:15,308 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 104654 states to 104654 states and 194950 transitions. [2022-07-13 04:09:15,308 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 104654 [2022-07-13 04:09:15,371 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 104654 [2022-07-13 04:09:15,372 INFO L73 IsDeterministic]: Start isDeterministic. Operand 104654 states and 194950 transitions. [2022-07-13 04:09:15,424 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:15,425 INFO L369 hiAutomatonCegarLoop]: Abstraction has 104654 states and 194950 transitions. [2022-07-13 04:09:15,467 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 104654 states and 194950 transitions. [2022-07-13 04:09:16,311 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 104654 to 103463. [2022-07-13 04:09:16,397 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 103463 states, 103463 states have (on average 1.864415298222553) internal successors, (192898), 103462 states have internal predecessors, (192898), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:16,586 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103463 states to 103463 states and 192898 transitions. [2022-07-13 04:09:16,587 INFO L392 hiAutomatonCegarLoop]: Abstraction has 103463 states and 192898 transitions. [2022-07-13 04:09:16,587 INFO L374 stractBuchiCegarLoop]: Abstraction has 103463 states and 192898 transitions. [2022-07-13 04:09:16,587 INFO L287 stractBuchiCegarLoop]: ======== Iteration 6 ============ [2022-07-13 04:09:16,587 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 103463 states and 192898 transitions. [2022-07-13 04:09:17,208 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 23837 [2022-07-13 04:09:17,208 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:17,208 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:17,213 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:17,214 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:17,214 INFO L752 eck$LassoCheckResult]: Stem: 570754#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 569337#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 566754#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 566755#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 569836#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 569837#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 569383#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 567588#L2802 assume { :end_inline_initFloors } true; 567589#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 570597#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 565750#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 565494#L3080 assume 0 == initPersonOnFloor_~floor#1; 565495#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 564485#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 567381#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 564946#L2884-2 assume { :end_inline_callOnFloor } true; 567548#L3224 assume { :end_inline_initPersonOnFloor } true; 567549#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 570385#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 567909#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 567910#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 570632#L732 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 565037#L742 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 565038#L753 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 567405#L764 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 567407#L775 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 568414#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 571497#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 571492#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 571491#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 571464#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571455#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 571447#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 571441#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 571436#L2250 assume !(0 != timeShift_~tmp___9~3#1); 571433#L2341 assume !(1 == ~doorState~0); 571430#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 571412#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 571407#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 571408#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 571174#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571123#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 571124#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 571101#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 567216#L2037 assume !(1 == ~currentHeading~0); 567217#L2047 assume !(0 == ~currentFloorID~0); 565445#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 565446#L2053-1 assume { :end_inline_continueInDirection } true; 640796#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 640792#L801 assume !(-1 == ~expectedDirection~0); 640793#L813 assume !(1 == ~expectedDirection~0); 640788#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 628975#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 628974#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 628973#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 628971#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 628969#L732-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 628966#L742-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 628963#L753-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 628954#L764-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 628952#L775-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 628949#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 628948#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 605247#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 628947#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 628945#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 628946#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 629006#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 629007#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 632189#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 632190#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 632553#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 632552#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 614790#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 632550#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 632502#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 632499#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 632496#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 632494#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 571062#L2037-3 assume !(1 == ~currentHeading~0); 569242#L2047-9 assume !(0 == ~currentFloorID~0); 569243#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 625784#L2053-7 assume { :end_inline_continueInDirection } true; 625775#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 625765#L801-1 assume !(-1 == ~expectedDirection~0); 625757#L813-1 assume !(1 == ~expectedDirection~0); 625734#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 571782#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571775#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 571774#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 571725#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 569910#L732-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 569911#L742-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 570281#L753-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 565103#L764-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 565105#L775-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 565401#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 632391#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 589777#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 632390#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 632387#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 632388#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 634244#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 625600#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 625593#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 625594#L2341-6 assume !(1 == ~doorState~0); 643311#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 643309#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 596118#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 643307#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 643304#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 643305#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 646558#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 646556#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 646557#L2037-6 assume !(1 == ~currentHeading~0); 632868#L2047-18 assume !(0 == ~currentFloorID~0); 632866#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 632858#L2053-13 assume { :end_inline_continueInDirection } true; 632827#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 632820#L801-2 assume !(-1 == ~expectedDirection~0); 632687#L813-2 assume !(1 == ~expectedDirection~0); 632393#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 632383#L2373-2 assume { :end_inline_timeShift } true; 630774#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 630764#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 624089#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 624087#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 624016#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 624001#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 623999#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 623993#L2884-5 assume { :end_inline_callOnFloor } true; 623982#L3224-1 assume { :end_inline_initPersonOnFloor } true; 623309#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 623308#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 623307#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 623306#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 570710#L732-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 569483#L742-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 569485#L753-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 570227#L764-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 569356#L775-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 566065#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 642230#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 576923#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 642229#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 642170#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 642172#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 647963#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 630638#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 630635#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 630636#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 648023#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 648022#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 588022#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 648021#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 648020#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 647866#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 647864#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 647861#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 647862#L2037-9 assume !(1 == ~currentHeading~0); 651366#L2047-27 assume !(0 == ~currentFloorID~0); 651363#L2047-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 647722#L2053-19 assume { :end_inline_continueInDirection } true; 647718#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 647714#L801-3 assume !(-1 == ~expectedDirection~0); 647715#L813-3 assume !(1 == ~expectedDirection~0); 647704#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 647701#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 647700#L977-2 [2022-07-13 04:09:17,215 INFO L754 eck$LassoCheckResult]: Loop: 647700#L977-2 assume !false; 647699#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 647698#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 647697#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 647696#L985 assume 1 != cleanup_~tmp___0~4#1; 646788#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 646787#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 644781#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 644770#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 644761#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 644760#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 571745#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 571746#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 571741#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 571742#L670-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 567952#L732-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 566439#L742-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 566441#L753-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 568256#L764-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 567823#L775-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 570355#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 636753#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 574134#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 636751#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 636722#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 636724#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 652191#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 627120#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 627118#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 627119#L2341-12 assume !(1 == ~doorState~0); 568640#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 568641#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 652249#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 652248#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 652247#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 652071#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 652069#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 652067#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 652068#L2037-12 assume !(1 == ~currentHeading~0); 655686#L2047-36 assume !(0 == ~currentFloorID~0); 655684#L2047-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 647719#L2053-25 assume { :end_inline_continueInDirection } true; 647717#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 647710#L801-4 assume !(-1 == ~expectedDirection~0); 647711#L813-4 assume !(1 == ~expectedDirection~0); 647703#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 647702#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 647700#L977-2 [2022-07-13 04:09:17,215 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:17,215 INFO L85 PathProgramCache]: Analyzing trace with hash 354311246, now seen corresponding path program 1 times [2022-07-13 04:09:17,215 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:17,216 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1309693019] [2022-07-13 04:09:17,216 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:17,216 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:17,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:17,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:17,246 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:17,246 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1309693019] [2022-07-13 04:09:17,246 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1309693019] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:17,246 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:17,246 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:17,247 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1390943526] [2022-07-13 04:09:17,247 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:17,247 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:17,247 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:17,247 INFO L85 PathProgramCache]: Analyzing trace with hash -2013008837, now seen corresponding path program 1 times [2022-07-13 04:09:17,248 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:17,248 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2036293983] [2022-07-13 04:09:17,248 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:17,248 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:17,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:17,593 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:17,594 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:17,594 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2036293983] [2022-07-13 04:09:17,594 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [2036293983] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:17,594 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:17,594 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2022-07-13 04:09:17,594 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1393987071] [2022-07-13 04:09:17,595 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:17,595 INFO L769 eck$LassoCheckResult]: loop already infeasible [2022-07-13 04:09:17,595 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:17,596 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2022-07-13 04:09:17,596 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2022-07-13 04:09:17,596 INFO L87 Difference]: Start difference. First operand 103463 states and 192898 transitions. cyclomatic complexity: 89439 Second operand has 17 states, 17 states have (on average 2.764705882352941) internal successors, (47), 17 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:44,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:44,036 INFO L93 Difference]: Finished difference Result 343873 states and 629596 transitions. [2022-07-13 04:09:44,037 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 97 states. [2022-07-13 04:09:44,037 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 343873 states and 629596 transitions. [2022-07-13 04:09:45,568 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 78663 [2022-07-13 04:09:46,762 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 343873 states to 331141 states and 605582 transitions. [2022-07-13 04:09:46,762 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 331141 [2022-07-13 04:09:47,008 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 331141 [2022-07-13 04:09:47,009 INFO L73 IsDeterministic]: Start isDeterministic. Operand 331141 states and 605582 transitions. [2022-07-13 04:09:47,188 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:47,188 INFO L369 hiAutomatonCegarLoop]: Abstraction has 331141 states and 605582 transitions. [2022-07-13 04:09:47,604 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 331141 states and 605582 transitions. [2022-07-13 04:09:49,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 331141 to 165946. [2022-07-13 04:09:49,911 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 165946 states, 165946 states have (on average 1.844913405565666) internal successors, (306156), 165945 states have internal predecessors, (306156), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:50,269 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 165946 states to 165946 states and 306156 transitions. [2022-07-13 04:09:50,270 INFO L392 hiAutomatonCegarLoop]: Abstraction has 165946 states and 306156 transitions. [2022-07-13 04:09:50,270 INFO L374 stractBuchiCegarLoop]: Abstraction has 165946 states and 306156 transitions. [2022-07-13 04:09:50,270 INFO L287 stractBuchiCegarLoop]: ======== Iteration 7 ============ [2022-07-13 04:09:50,270 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 165946 states and 306156 transitions. [2022-07-13 04:09:51,111 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 38835 [2022-07-13 04:09:51,116 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2022-07-13 04:09:51,116 INFO L119 BuchiIsEmpty]: Starting construction of run [2022-07-13 04:09:51,142 INFO L179 hiAutomatonCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:51,142 INFO L180 hiAutomatonCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2022-07-13 04:09:51,143 INFO L752 eck$LassoCheckResult]: Stem: 1018511#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(30, 4);call #Ultimate.allocInit(9, 5);call #Ultimate.allocInit(21, 6);call #Ultimate.allocInit(30, 7);call #Ultimate.allocInit(9, 8);call #Ultimate.allocInit(21, 9);call #Ultimate.allocInit(30, 10);call #Ultimate.allocInit(9, 11);call #Ultimate.allocInit(25, 12);call #Ultimate.allocInit(30, 13);call #Ultimate.allocInit(9, 14);call #Ultimate.allocInit(25, 15);call #Ultimate.allocInit(10, 16);call #Ultimate.allocInit(4, 17);call write~init~int(91, 17, 0, 1);call write~init~int(95, 17, 1, 1);call write~init~int(93, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(4, 18);call write~init~int(91, 18, 0, 1);call write~init~int(93, 18, 1, 1);call write~init~int(32, 18, 2, 1);call write~init~int(0, 18, 3, 1);call #Ultimate.allocInit(5, 19);call write~init~int(32, 19, 0, 1);call write~init~int(97, 19, 1, 1);call write~init~int(116, 19, 2, 1);call write~init~int(32, 19, 3, 1);call write~init~int(0, 19, 4, 1);call #Ultimate.allocInit(3, 20);call write~init~int(37, 20, 0, 1);call write~init~int(105, 20, 1, 1);call write~init~int(0, 20, 2, 1);call #Ultimate.allocInit(10, 21);call #Ultimate.allocInit(3, 22);call write~init~int(117, 22, 0, 1);call write~init~int(112, 22, 1, 1);call write~init~int(0, 22, 2, 1);call #Ultimate.allocInit(5, 23);call write~init~int(100, 23, 0, 1);call write~init~int(111, 23, 1, 1);call write~init~int(119, 23, 2, 1);call write~init~int(110, 23, 3, 1);call write~init~int(0, 23, 4, 1);call #Ultimate.allocInit(7, 24);call write~init~int(32, 24, 0, 1);call write~init~int(73, 24, 1, 1);call write~init~int(76, 24, 2, 1);call write~init~int(95, 24, 3, 1);call write~init~int(112, 24, 4, 1);call write~init~int(58, 24, 5, 1);call write~init~int(0, 24, 6, 1);call #Ultimate.allocInit(4, 25);call write~init~int(32, 25, 0, 1);call write~init~int(37, 25, 1, 1);call write~init~int(105, 25, 2, 1);call write~init~int(0, 25, 3, 1);call #Ultimate.allocInit(4, 26);call write~init~int(32, 26, 0, 1);call write~init~int(37, 26, 1, 1);call write~init~int(105, 26, 2, 1);call write~init~int(0, 26, 3, 1);call #Ultimate.allocInit(4, 27);call write~init~int(32, 27, 0, 1);call write~init~int(37, 27, 1, 1);call write~init~int(105, 27, 2, 1);call write~init~int(0, 27, 3, 1);call #Ultimate.allocInit(4, 28);call write~init~int(32, 28, 0, 1);call write~init~int(37, 28, 1, 1);call write~init~int(105, 28, 2, 1);call write~init~int(0, 28, 3, 1);call #Ultimate.allocInit(4, 29);call write~init~int(32, 29, 0, 1);call write~init~int(37, 29, 1, 1);call write~init~int(105, 29, 2, 1);call write~init~int(0, 29, 3, 1);call #Ultimate.allocInit(6, 30);call write~init~int(32, 30, 0, 1);call write~init~int(70, 30, 1, 1);call write~init~int(95, 30, 2, 1);call write~init~int(112, 30, 3, 1);call write~init~int(58, 30, 4, 1);call write~init~int(0, 30, 5, 1);call #Ultimate.allocInit(4, 31);call write~init~int(32, 31, 0, 1);call write~init~int(37, 31, 1, 1);call write~init~int(105, 31, 2, 1);call write~init~int(0, 31, 3, 1);call #Ultimate.allocInit(4, 32);call write~init~int(32, 32, 0, 1);call write~init~int(37, 32, 1, 1);call write~init~int(105, 32, 2, 1);call write~init~int(0, 32, 3, 1);call #Ultimate.allocInit(4, 33);call write~init~int(32, 33, 0, 1);call write~init~int(37, 33, 1, 1);call write~init~int(105, 33, 2, 1);call write~init~int(0, 33, 3, 1);call #Ultimate.allocInit(4, 34);call write~init~int(32, 34, 0, 1);call write~init~int(37, 34, 1, 1);call write~init~int(105, 34, 2, 1);call write~init~int(0, 34, 3, 1);call #Ultimate.allocInit(4, 35);call write~init~int(32, 35, 0, 1);call write~init~int(37, 35, 1, 1);call write~init~int(105, 35, 2, 1);call write~init~int(0, 35, 3, 1);call #Ultimate.allocInit(2, 36);call write~init~int(10, 36, 0, 1);call write~init~int(0, 36, 1, 1);~head~0.base, ~head~0.offset := 0, 0;~executiveFloor~0 := 4;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1016981#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret60#1, main_~retValue_acc~7#1, main_~tmp~15#1;havoc main_~retValue_acc~7#1;havoc main_~tmp~15#1;assume { :begin_inline_select_helpers } true; 1014322#L3410 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 1014323#L3403 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~29#1;havoc valid_product_~retValue_acc~29#1;valid_product_~retValue_acc~29#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~29#1; 1017502#L3418 main_#t~ret60#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~15#1 := main_#t~ret60#1;havoc main_#t~ret60#1; 1017503#L1172 assume 0 != main_~tmp~15#1;assume { :begin_inline_setup } true; 1017034#L1145 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1015159#L2802 assume { :end_inline_initFloors } true; 1015160#L1248 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1018338#L569 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1013307#L594 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1013053#L3080 assume 0 == initPersonOnFloor_~floor#1; 1013054#L3081 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1012057#L3188-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1014952#L2872 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1012508#L2884-2 assume { :end_inline_callOnFloor } true; 1015120#L3224 assume { :end_inline_initPersonOnFloor } true; 1015121#L894 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1018095#L1428 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1015482#L1480 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1015483#L670 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1018378#L732 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1014146#L1445-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1012474#L1466-5 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1017605#L736 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1014554#L776 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1012642#L2809 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1012643#L2836 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1016350#L2713 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 1016283#L2097 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1016285#L1428-1 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1019568#L2101 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1019569#L2114 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1019563#L2250 assume !(0 != timeShift_~tmp___9~3#1); 1019564#L2341 assume !(1 == ~doorState~0); 1019559#L2341-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1019560#L2809-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1019296#L2836-3 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1019556#L2713-1 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1019551#L1980 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1019553#L1428-2 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1019530#L1993 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 1019531#L2349 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1021434#L2037 assume !(1 == ~currentHeading~0); 1022344#L2047 assume !(0 == ~currentFloorID~0); 1022345#L2047-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1021559#L2053-1 assume { :end_inline_continueInDirection } true; 1021557#L2358-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1021556#L801 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1020184#L1480-1 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1020185#L805 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1019689#L813 assume !(1 == ~expectedDirection~0); 1019164#L814 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1019021#L2373 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1019019#L1428-4 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1019017#L1480-3 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1019013#L670-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1019004#L732-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1013352#L1445-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1013353#L1466-17 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1014651#L736-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1013395#L776-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1037315#L2809-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1029055#L2836-25 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1037309#L2713-3 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 1037310#L2097-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1037290#L1428-5 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1037281#L2101-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1037283#L2114-1 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1041042#L2250-2 assume !(0 != timeShift_~tmp___9~3#1); 1041043#L2341-3 assume 1 == ~doorState~0;~doorState~0 := 0; 1041027#L2341-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1041028#L2809-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1030191#L2836-28 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1037126#L2713-4 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1037127#L1980-2 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1041654#L1428-6 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1041655#L1993-2 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 1041649#L2349-2 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1041651#L2037-3 assume !(1 == ~currentHeading~0); 1049514#L2047-9 assume !(0 == ~currentFloorID~0); 1049506#L2047-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1049502#L2053-7 assume { :end_inline_continueInDirection } true; 1049500#L2358-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1049499#L801-1 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1048646#L1480-4 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1048647#L805-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1048644#L813-1 assume !(1 == ~expectedDirection~0); 1048640#L814-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1047022#L2373-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1047021#L1428-8 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1047015#L1480-6 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1047012#L670-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1047011#L732-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1046988#L1445-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1045368#L1466-29 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1045359#L736-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1045354#L776-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1045338#L2809-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1045339#L2836-50 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1045330#L2713-6 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 1045331#L2097-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1045320#L1428-9 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1045321#L2101-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1045312#L2114-2 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1045304#L2250-4 assume !(0 != timeShift_~tmp___9~3#1); 1045306#L2341-6 assume !(1 == ~doorState~0); 1060634#L2341-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1060635#L2809-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1060046#L2836-53 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1109592#L2713-7 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1109591#L1980-4 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1109586#L1428-10 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1109585#L1993-4 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 1109583#L2349-4 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1109584#L2037-6 assume !(1 == ~currentHeading~0); 1044398#L2047-18 assume !(0 == ~currentFloorID~0); 1044399#L2047-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1044371#L2053-13 assume { :end_inline_continueInDirection } true; 1044367#L2358-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1044352#L801-2 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1042695#L1480-7 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1042705#L805-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1024295#L813-2 assume !(1 == ~expectedDirection~0); 1024293#L814-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1024292#L2373-2 assume { :end_inline_timeShift } true; 1024291#L961 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret48#1, bobCall_~tmp~7#1;havoc bobCall_~tmp~7#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~4#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~4#1; 1024289#L569-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~4#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~4#1; 1024284#L594-1 bobCall_#t~ret48#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~7#1 := bobCall_#t~ret48#1;havoc bobCall_#t~ret48#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~7#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1024283#L3080-1 assume 0 == initPersonOnFloor_~floor#1; 1024252#L3081-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 1024101#L3188-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1022885#L2872-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 1022840#L2884-5 assume { :end_inline_callOnFloor } true; 1022544#L3224-1 assume { :end_inline_initPersonOnFloor } true; 1019022#L894-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret54#1, cleanup_#t~ret55#1, cleanup_~i~2#1, cleanup_~tmp~13#1, cleanup_~tmp___0~4#1, cleanup_~__cil_tmp4~2#1;havoc cleanup_~i~2#1;havoc cleanup_~tmp~13#1;havoc cleanup_~tmp___0~4#1;havoc cleanup_~__cil_tmp4~2#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1019020#L1428-12 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1019018#L1480-9 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1019015#L670-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1019011#L732-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1013572#L1445-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1013436#L1466-41 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1013437#L736-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1013625#L776-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1117051#L2809-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1090714#L2836-75 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1117050#L2713-9 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 1117048#L2097-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1117046#L1428-13 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1117047#L2101-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1114389#L2114-3 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1114387#L2250-6 assume !(0 != timeShift_~tmp___9~3#1); 1114388#L2341-9 assume 1 == ~doorState~0;~doorState~0 := 0; 1156175#L2341-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1123137#L2809-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1091097#L2836-78 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1123127#L2713-10 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1122913#L1980-6 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1122909#L1428-14 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1122907#L1993-6 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 1122902#L2349-6 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1122904#L2037-9 assume !(1 == ~currentHeading~0); 1122099#L2047-27 assume !(0 == ~currentFloorID~0); 1122092#L2047-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1122089#L2053-19 assume { :end_inline_continueInDirection } true; 1122087#L2358-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1122086#L801-3 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1119110#L1480-10 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1120699#L805-6 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1052720#L813-3 assume !(1 == ~expectedDirection~0); 1052717#L814-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1052715#L2373-3 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 0; 1052714#L977-2 [2022-07-13 04:09:51,144 INFO L754 eck$LassoCheckResult]: Loop: 1052714#L977-2 assume !false; 1052710#L978 cleanup_~__cil_tmp4~2#1 := ~cleanupTimeShifts~0 - 1; 1052709#L981 assume cleanup_~i~2#1 < cleanup_~__cil_tmp4~2#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~8#1;havoc isBlocked_~retValue_acc~8#1;isBlocked_~retValue_acc~8#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~8#1; 1052677#L1279 cleanup_#t~ret54#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~4#1 := cleanup_#t~ret54#1;havoc cleanup_#t~ret54#1; 1052675#L985 assume 1 != cleanup_~tmp___0~4#1; 1052669#L985-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret67#1, isIdle_~retValue_acc~15#1, isIdle_~tmp~18#1;havoc isIdle_~retValue_acc~15#1;havoc isIdle_~tmp~18#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret62#1, anyStopRequested_#t~ret63#1, anyStopRequested_#t~ret64#1, anyStopRequested_#t~ret65#1, anyStopRequested_#t~ret66#1, anyStopRequested_~retValue_acc~14#1, anyStopRequested_~tmp~17#1, anyStopRequested_~tmp___0~6#1, anyStopRequested_~tmp___1~4#1, anyStopRequested_~tmp___2~2#1, anyStopRequested_~tmp___3~1#1;havoc anyStopRequested_~retValue_acc~14#1;havoc anyStopRequested_~tmp~17#1;havoc anyStopRequested_~tmp___0~6#1;havoc anyStopRequested_~tmp___1~4#1;havoc anyStopRequested_~tmp___2~2#1;havoc anyStopRequested_~tmp___3~1#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1044360#L2809-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1042708#L2836-100 anyStopRequested_#t~ret62#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~1#1 := anyStopRequested_#t~ret62#1;havoc anyStopRequested_#t~ret62#1; 1022875#L1536 assume 0 != anyStopRequested_~tmp___3~1#1;anyStopRequested_~retValue_acc~14#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~14#1; 1022838#L1600 isIdle_#t~ret67#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~18#1 := isIdle_#t~ret67#1;havoc isIdle_#t~ret67#1;isIdle_~retValue_acc~15#1 := (if 0 == isIdle_~tmp~18#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~15#1; 1022543#L1613 cleanup_#t~ret55#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~13#1 := cleanup_#t~ret55#1;havoc cleanup_#t~ret55#1; 1019038#L997 assume !(0 != cleanup_~tmp~13#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret101#1, timeShift_#t~ret102#1, timeShift_#t~ret103#1, timeShift_#t~ret104#1, timeShift_#t~ret105#1, timeShift_#t~ret106#1, timeShift_#t~ret107#1, timeShift_#t~ret108#1, timeShift_#t~ret109#1, timeShift_#t~ret110#1, timeShift_#t~ret111#1, timeShift_~tmp~25#1, timeShift_~tmp___0~12#1, timeShift_~tmp___1~7#1, timeShift_~tmp___2~5#1, timeShift_~tmp___3~4#1, timeShift_~tmp___4~3#1, timeShift_~tmp___5~3#1, timeShift_~tmp___6~3#1, timeShift_~tmp___7~3#1, timeShift_~tmp___8~3#1, timeShift_~tmp___9~3#1;havoc timeShift_~tmp~25#1;havoc timeShift_~tmp___0~12#1;havoc timeShift_~tmp___1~7#1;havoc timeShift_~tmp___2~5#1;havoc timeShift_~tmp___3~4#1;havoc timeShift_~tmp___4~3#1;havoc timeShift_~tmp___5~3#1;havoc timeShift_~tmp___6~3#1;havoc timeShift_~tmp___7~3#1;havoc timeShift_~tmp___8~3#1;havoc timeShift_~tmp___9~3#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret33#1, __utac_acc__Specification3_spec__1_#t~ret34#1, __utac_acc__Specification3_spec__1_#t~ret35#1, __utac_acc__Specification3_spec__1_#t~ret36#1, __utac_acc__Specification3_spec__1_#t~ret37#1, __utac_acc__Specification3_spec__1_#t~ret38#1, __utac_acc__Specification3_spec__1_#t~ret39#1, __utac_acc__Specification3_spec__1_#t~ret40#1, __utac_acc__Specification3_spec__1_#t~ret41#1, __utac_acc__Specification3_spec__1_#t~ret42#1, __utac_acc__Specification3_spec__1_#t~ret43#1, __utac_acc__Specification3_spec__1_#t~ret44#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~5#1, __utac_acc__Specification3_spec__1_~tmp___0~2#1, __utac_acc__Specification3_spec__1_~tmp___1~2#1, __utac_acc__Specification3_spec__1_~tmp___2~0#1, __utac_acc__Specification3_spec__1_~tmp___3~0#1, __utac_acc__Specification3_spec__1_~tmp___4~0#1, __utac_acc__Specification3_spec__1_~tmp___5~0#1, __utac_acc__Specification3_spec__1_~tmp___6~0#1, __utac_acc__Specification3_spec__1_~tmp___7~0#1, __utac_acc__Specification3_spec__1_~tmp___8~0#1, __utac_acc__Specification3_spec__1_~tmp___9~0#1, __utac_acc__Specification3_spec__1_~tmp___10~0#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~2#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~0#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~0#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1019037#L1428-16 __utac_acc__Specification3_spec__1_#t~ret33#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~5#1 := __utac_acc__Specification3_spec__1_#t~ret33#1;havoc __utac_acc__Specification3_spec__1_#t~ret33#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~5#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1019036#L1480-12 __utac_acc__Specification3_spec__1_#t~ret34#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~0#1 := __utac_acc__Specification3_spec__1_#t~ret34#1;havoc __utac_acc__Specification3_spec__1_#t~ret34#1; 1019034#L670-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0#1); 1019032#L732-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~11#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~11#1; 1017983#L1445-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~11#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~11#1; 1014828#L1466-53 __utac_acc__Specification3_spec__1_#t~ret40#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~0#1 := __utac_acc__Specification3_spec__1_#t~ret40#1;havoc __utac_acc__Specification3_spec__1_#t~ret40#1; 1018133#L736-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0#1;~expectedDirection~0 := -1; 1015395#L776-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1, stopRequestedAtCurrentFloor_#t~ret86#1, stopRequestedAtCurrentFloor_#t~ret87#1, stopRequestedAtCurrentFloor_#t~ret88#1, stopRequestedAtCurrentFloor_~retValue_acc~20#1, stopRequestedAtCurrentFloor_~tmp~23#1, stopRequestedAtCurrentFloor_~tmp___0~10#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~20#1;havoc stopRequestedAtCurrentFloor_~tmp~23#1;havoc stopRequestedAtCurrentFloor_~tmp___0~10#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1117274#L2809-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1022549#L2836-105 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1117273#L2713-12 stopRequestedAtCurrentFloor_#t~ret85#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~23#1 := stopRequestedAtCurrentFloor_#t~ret85#1;havoc stopRequestedAtCurrentFloor_#t~ret85#1; 1117271#L2097-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~23#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1116884#L1428-17 stopRequestedAtCurrentFloor_#t~ret86#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~10#1 := stopRequestedAtCurrentFloor_#t~ret86#1;havoc stopRequestedAtCurrentFloor_#t~ret86#1; 1116885#L2101-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~10#1);stopRequestedAtCurrentFloor_~retValue_acc~20#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~20#1; 1113378#L2114-4 timeShift_#t~ret101#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~3#1 := timeShift_#t~ret101#1;havoc timeShift_#t~ret101#1; 1113376#L2250-8 assume !(0 != timeShift_~tmp___9~3#1); 1113377#L2341-12 assume !(1 == ~doorState~0); 1119007#L2341-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret79#1, stopRequestedInDirection_#t~ret80#1, stopRequestedInDirection_#t~ret81#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~17#1, stopRequestedInDirection_~tmp~20#1, stopRequestedInDirection_~tmp___0~8#1, stopRequestedInDirection_~__cil_tmp7~5#1, stopRequestedInDirection_~__cil_tmp8~5#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~17#1;havoc stopRequestedInDirection_~tmp~20#1;havoc stopRequestedInDirection_~tmp___0~8#1;havoc stopRequestedInDirection_~__cil_tmp7~5#1;havoc stopRequestedInDirection_~__cil_tmp8~5#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret138#1, isExecutiveFloorCalling_~retValue_acc~23#1;havoc isExecutiveFloorCalling_~retValue_acc~23#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~25#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~25#1; 1119005#L2809-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~25#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~25#1; 1110995#L2836-108 isExecutiveFloorCalling_#t~ret138#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~23#1 := isExecutiveFloorCalling_#t~ret138#1;havoc isExecutiveFloorCalling_#t~ret138#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~23#1; 1119004#L2713-13 stopRequestedInDirection_#t~ret79#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~8#1 := stopRequestedInDirection_#t~ret79#1;havoc stopRequestedInDirection_#t~ret79#1; 1118864#L1980-8 assume 0 != stopRequestedInDirection_~tmp___0~8#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~9#1;havoc getCurrentFloorID_~retValue_acc~9#1;getCurrentFloorID_~retValue_acc~9#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~9#1; 1118812#L1428-18 stopRequestedInDirection_#t~ret80#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~20#1 := stopRequestedInDirection_#t~ret80#1;havoc stopRequestedInDirection_#t~ret80#1;stopRequestedInDirection_~__cil_tmp7~5#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~5#1 := (if stopRequestedInDirection_~tmp~20#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~17#1 := (if stopRequestedInDirection_~__cil_tmp8~5#1 == stopRequestedInDirection_~__cil_tmp7~5#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~17#1; 1118790#L1993-8 timeShift_#t~ret108#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~3#1 := timeShift_#t~ret108#1;havoc timeShift_#t~ret108#1; 1118791#L2349-8 assume 0 != timeShift_~tmp___8~3#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret82#1, continueInDirection_~dir#1, continueInDirection_~tmp~21#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~21#1;~currentHeading~0 := continueInDirection_~dir#1; 1118805#L2037-12 assume !(1 == ~currentHeading~0); 1119918#L2047-36 assume !(0 == ~currentFloorID~0); 1119911#L2047-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1119908#L2053-25 assume { :end_inline_continueInDirection } true; 1119132#L2358-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret45#1, __utac_acc__Specification3_spec__2_#t~ret46#1, __utac_acc__Specification3_spec__2_~tmp~6#1, __utac_acc__Specification3_spec__2_~tmp___0~3#1;havoc __utac_acc__Specification3_spec__2_~tmp~6#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~3#1; 1119131#L801-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~12#1;havoc getCurrentHeading_~retValue_acc~12#1;getCurrentHeading_~retValue_acc~12#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~12#1; 1096817#L1480-13 __utac_acc__Specification3_spec__2_#t~ret45#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~3#1 := __utac_acc__Specification3_spec__2_#t~ret45#1;havoc __utac_acc__Specification3_spec__2_#t~ret45#1; 1119107#L805-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3#1); 1052722#L813-4 assume !(1 == ~expectedDirection~0); 1052718#L814-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1052716#L2373-4 assume { :end_inline_timeShift } true;cleanup_~i~2#1 := 1 + cleanup_~i~2#1; 1052714#L977-2 [2022-07-13 04:09:51,144 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:51,144 INFO L85 PathProgramCache]: Analyzing trace with hash -1370010220, now seen corresponding path program 1 times [2022-07-13 04:09:51,145 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:51,145 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [149047261] [2022-07-13 04:09:51,145 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:51,145 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:51,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:51,227 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:51,228 INFO L136 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2022-07-13 04:09:51,228 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [149047261] [2022-07-13 04:09:51,228 INFO L157 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [149047261] provided 1 perfect and 0 imperfect interpolant sequences [2022-07-13 04:09:51,228 INFO L184 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2022-07-13 04:09:51,228 INFO L197 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2022-07-13 04:09:51,228 INFO L121 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [577315335] [2022-07-13 04:09:51,228 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2022-07-13 04:09:51,228 INFO L757 eck$LassoCheckResult]: stem already infeasible [2022-07-13 04:09:51,228 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:51,229 INFO L85 PathProgramCache]: Analyzing trace with hash -1945978745, now seen corresponding path program 1 times [2022-07-13 04:09:51,229 INFO L118 FreeRefinementEngine]: Executing refinement strategy CAMEL [2022-07-13 04:09:51,229 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1689946951] [2022-07-13 04:09:51,229 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2022-07-13 04:09:51,229 INFO L127 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2022-07-13 04:09:51,237 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-13 04:09:51,238 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2022-07-13 04:09:51,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2022-07-13 04:09:51,305 INFO L130 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2022-07-13 04:09:52,210 INFO L210 LassoAnalysis]: Preferences: [2022-07-13 04:09:52,211 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-13 04:09:52,211 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-13 04:09:52,211 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-13 04:09:52,211 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2022-07-13 04:09:52,211 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,211 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-13 04:09:52,211 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-13 04:09:52,211 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration7_Loop [2022-07-13 04:09:52,212 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-13 04:09:52,212 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-13 04:09:52,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,234 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,244 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,251 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,283 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,294 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,317 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,322 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,323 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,324 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,331 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,337 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,342 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:52,711 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-13 04:09:52,711 INFO L404 LassoAnalysis]: Checking for nontermination... [2022-07-13 04:09:52,713 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,713 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,714 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,716 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2022-07-13 04:09:52,719 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,719 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,742 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,743 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret62#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret62#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:52,760 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2022-07-13 04:09:52,761 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,761 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,765 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,766 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2022-07-13 04:09:52,767 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,767 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,788 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,788 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret34#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret34#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:52,803 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2022-07-13 04:09:52,804 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,804 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,805 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,806 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2022-07-13 04:09:52,807 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,807 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,813 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,813 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret80#1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret80#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:52,847 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Ended with exit code 0 [2022-07-13 04:09:52,850 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,850 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,864 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,870 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,870 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,879 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2022-07-13 04:09:52,888 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,888 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:52,913 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:52,914 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,914 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,915 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,919 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,919 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,926 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2022-07-13 04:09:52,948 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,948 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=-2, ULTIMATE.start_buttonForFloorIsPressed_#res#1=-2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~11#1=-2, ~floorButtons_0~0=-2} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~0#1=-2, ULTIMATE.start_buttonForFloorIsPressed_#res#1=-2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~11#1=-2, ~floorButtons_0~0=-2} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:52,969 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Ended with exit code 0 [2022-07-13 04:09:52,970 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:52,970 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:52,975 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:52,976 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2022-07-13 04:09:52,978 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:52,978 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:52,995 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:52,995 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,025 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,026 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,026 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,027 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,028 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2022-07-13 04:09:53,032 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,032 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,053 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,053 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,070 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,071 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,071 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,072 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,073 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2022-07-13 04:09:53,074 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,074 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,092 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,092 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret46#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret46#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,107 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,109 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,109 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,110 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,111 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2022-07-13 04:09:53,112 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,112 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,127 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,128 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret64#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret64#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,144 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Ended with exit code 0 [2022-07-13 04:09:53,145 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,145 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,146 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,151 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,151 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,151 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2022-07-13 04:09:53,165 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,166 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,185 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,186 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,186 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,187 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,188 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2022-07-13 04:09:53,189 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,189 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,203 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,203 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret35#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret35#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,218 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Ended with exit code 0 [2022-07-13 04:09:53,218 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,218 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,219 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,228 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2022-07-13 04:09:53,238 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,238 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,244 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,244 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___7~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___7~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,259 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,259 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,260 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,261 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,262 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2022-07-13 04:09:53,263 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,263 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,273 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,273 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0, ULTIMATE.start_buttonForFloorIsPressed_~floorID#1=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0, ULTIMATE.start_buttonForFloorIsPressed_~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,289 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,290 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,290 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,291 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,291 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2022-07-13 04:09:53,293 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,293 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,307 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,307 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,322 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,323 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,323 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,324 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,325 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2022-07-13 04:09:53,327 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,327 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,339 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,339 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,354 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,355 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,355 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,356 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,357 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2022-07-13 04:09:53,358 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,358 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,379 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,379 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret138#1=0} Honda state: {ULTIMATE.start_isExecutiveFloorCalling_#t~ret138#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,394 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,394 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,394 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,395 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,401 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,401 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,403 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2022-07-13 04:09:53,422 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,422 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret67#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret67#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,439 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,440 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,440 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,441 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,445 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2022-07-13 04:09:53,446 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,446 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,452 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2022-07-13 04:09:53,452 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret110#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret110#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2022-07-13 04:09:53,467 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,468 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,468 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,469 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,474 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2022-07-13 04:09:53,475 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,507 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2022-07-13 04:09:53,517 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:53,518 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:53,518 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:53,520 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:53,525 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2022-07-13 04:09:53,525 INFO L160 nArgumentSynthesizer]: Using integer mode. [2022-07-13 04:09:53,547 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2022-07-13 04:09:54,048 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2022-07-13 04:09:54,054 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:54,054 INFO L210 LassoAnalysis]: Preferences: [2022-07-13 04:09:54,054 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2022-07-13 04:09:54,054 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2022-07-13 04:09:54,054 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2022-07-13 04:09:54,054 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2022-07-13 04:09:54,054 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,054 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2022-07-13 04:09:54,054 INFO L132 ssoRankerPreferences]: Path of dumped script: [2022-07-13 04:09:54,054 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product11.cil.c_Iteration7_Loop [2022-07-13 04:09:54,054 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2022-07-13 04:09:54,054 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2022-07-13 04:09:54,057 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,080 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,106 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,123 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,130 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,131 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,134 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,185 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,223 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2022-07-13 04:09:54,779 INFO L294 LassoAnalysis]: Preprocessing complete. [2022-07-13 04:09:54,782 INFO L490 LassoAnalysis]: Using template 'affine'. [2022-07-13 04:09:54,783 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,783 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,788 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,788 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2022-07-13 04:09:54,790 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,795 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,795 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,796 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,796 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-13 04:09:54,796 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,799 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-13 04:09:54,799 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,804 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:54,818 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Ended with exit code 0 [2022-07-13 04:09:54,819 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,819 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,820 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,821 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2022-07-13 04:09:54,822 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,827 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,827 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,827 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,827 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:54,827 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,828 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:54,828 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,843 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:54,858 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:54,858 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,858 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,859 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,860 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2022-07-13 04:09:54,861 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,866 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,866 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,866 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,866 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:54,866 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,867 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:54,867 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,883 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:54,897 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Ended with exit code 0 [2022-07-13 04:09:54,897 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,897 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,898 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,899 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2022-07-13 04:09:54,900 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,905 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,905 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,905 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,905 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:54,905 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,906 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:54,906 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,921 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:54,938 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:54,938 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,938 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,939 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,940 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2022-07-13 04:09:54,941 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,946 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,946 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,946 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,946 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:54,946 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,946 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:54,946 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,962 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:54,977 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:54,977 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:54,977 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:54,978 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:54,978 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2022-07-13 04:09:54,980 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:54,985 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:54,985 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:54,986 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:54,986 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2022-07-13 04:09:54,986 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:54,987 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2022-07-13 04:09:54,987 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:54,988 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,003 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,003 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,003 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,004 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,015 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,020 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,020 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,021 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,021 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,021 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,021 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,021 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,026 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2022-07-13 04:09:55,034 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,051 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,051 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,051 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,052 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,053 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2022-07-13 04:09:55,054 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,059 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,059 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,059 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,059 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,059 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,060 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,060 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,060 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,075 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2022-07-13 04:09:55,076 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,076 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,077 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,078 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2022-07-13 04:09:55,079 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,084 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,084 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,084 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,084 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,084 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,084 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,084 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,100 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,117 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2022-07-13 04:09:55,117 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,117 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,118 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,119 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2022-07-13 04:09:55,120 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,125 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,125 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,126 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,126 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,126 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,126 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,126 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,130 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,144 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2022-07-13 04:09:55,145 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,145 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,146 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,149 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2022-07-13 04:09:55,150 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,156 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,156 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,156 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,156 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,156 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,159 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,159 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,171 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,186 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Ended with exit code 0 [2022-07-13 04:09:55,186 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,186 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,187 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,188 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2022-07-13 04:09:55,189 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,194 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,194 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,194 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,194 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,194 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,195 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,195 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,195 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,210 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Ended with exit code 0 [2022-07-13 04:09:55,210 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,210 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,212 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,213 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2022-07-13 04:09:55,214 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,218 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,219 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,219 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,219 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,219 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,219 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,219 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,220 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,236 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Ended with exit code 0 [2022-07-13 04:09:55,236 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,236 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,237 INFO L229 MonitoredProcess]: Starting monitored process 35 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,237 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Waiting until timeout for monitored process [2022-07-13 04:09:55,239 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,243 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,243 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,244 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,244 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,244 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,244 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,244 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,245 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,261 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (35)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,261 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,262 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,263 INFO L229 MonitoredProcess]: Starting monitored process 36 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,264 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Waiting until timeout for monitored process [2022-07-13 04:09:55,265 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,270 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,270 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,270 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,270 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,270 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,270 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,270 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,271 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,286 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (36)] Ended with exit code 0 [2022-07-13 04:09:55,286 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,286 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,287 INFO L229 MonitoredProcess]: Starting monitored process 37 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,288 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Waiting until timeout for monitored process [2022-07-13 04:09:55,289 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,294 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,294 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,294 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,294 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,295 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,295 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,295 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,309 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,333 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (37)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,333 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,333 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,340 INFO L229 MonitoredProcess]: Starting monitored process 38 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,341 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Waiting until timeout for monitored process [2022-07-13 04:09:55,342 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,347 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,347 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,347 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,347 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,347 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,348 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,348 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,355 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,372 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (38)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,372 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,373 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,373 INFO L229 MonitoredProcess]: Starting monitored process 39 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,375 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Waiting until timeout for monitored process [2022-07-13 04:09:55,375 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,380 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,380 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,381 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,381 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,381 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,381 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,381 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,390 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2022-07-13 04:09:55,404 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (39)] Ended with exit code 0 [2022-07-13 04:09:55,404 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,404 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,405 INFO L229 MonitoredProcess]: Starting monitored process 40 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,409 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2022-07-13 04:09:55,409 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Waiting until timeout for monitored process [2022-07-13 04:09:55,413 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2022-07-13 04:09:55,414 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2022-07-13 04:09:55,414 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2022-07-13 04:09:55,414 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2022-07-13 04:09:55,414 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2022-07-13 04:09:55,414 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2022-07-13 04:09:55,415 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2022-07-13 04:09:55,416 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2022-07-13 04:09:55,450 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2022-07-13 04:09:55,450 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2022-07-13 04:09:55,451 INFO L173 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2022-07-13 04:09:55,452 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2022-07-13 04:09:55,453 INFO L229 MonitoredProcess]: Starting monitored process 41 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2022-07-13 04:09:55,585 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2022-07-13 04:09:55,585 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2022-07-13 04:09:55,585 INFO L513 LassoAnalysis]: Proved termination. [2022-07-13 04:09:55,586 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2#1) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2#1 Supporting invariants [] [2022-07-13 04:09:55,592 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Waiting until timeout for monitored process [2022-07-13 04:09:55,602 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (40)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:55,604 INFO L293 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2022-07-13 04:09:55,625 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2022-07-13 04:09:55,770 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:55,774 INFO L263 TraceCheckSpWp]: Trace formula consists of 1154 conjuncts, 2 conjunts are in the unsatisfiable core [2022-07-13 04:09:55,783 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 04:09:55,987 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2022-07-13 04:09:55,989 INFO L263 TraceCheckSpWp]: Trace formula consists of 178 conjuncts, 5 conjunts are in the unsatisfiable core [2022-07-13 04:09:55,993 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2022-07-13 04:09:56,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2022-07-13 04:09:56,128 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2022-07-13 04:09:56,129 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 165946 states and 306156 transitions. cyclomatic complexity: 140216 Second operand has 5 states, 5 states have (on average 44.0) internal successors, (220), 5 states have internal predecessors, (220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:57,391 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (41)] Forceful destruction successful, exit code 0 [2022-07-13 04:09:57,431 INFO L75 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 165946 states and 306156 transitions. cyclomatic complexity: 140216. Second operand has 5 states, 5 states have (on average 44.0) internal successors, (220), 5 states have internal predecessors, (220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Result 204897 states and 377912 transitions. Complement of second has 8 states. [2022-07-13 04:09:57,431 INFO L141 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2022-07-13 04:09:57,434 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 5 states, 5 states have (on average 44.0) internal successors, (220), 5 states have internal predecessors, (220), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:57,441 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11578 transitions. [2022-07-13 04:09:57,442 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11578 transitions. Stem has 172 letters. Loop has 48 letters. [2022-07-13 04:09:57,444 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-13 04:09:57,444 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11578 transitions. Stem has 220 letters. Loop has 48 letters. [2022-07-13 04:09:57,445 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-13 04:09:57,445 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11578 transitions. Stem has 172 letters. Loop has 96 letters. [2022-07-13 04:09:57,446 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2022-07-13 04:09:57,446 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 204897 states and 377912 transitions. [2022-07-13 04:09:58,447 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-07-13 04:09:58,448 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 204897 states to 0 states and 0 transitions. [2022-07-13 04:09:58,448 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2022-07-13 04:09:58,448 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2022-07-13 04:09:58,448 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2022-07-13 04:09:58,448 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:58,448 INFO L369 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 04:09:58,448 INFO L392 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 04:09:58,448 INFO L100 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2022-07-13 04:09:58,449 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2022-07-13 04:09:58,449 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2022-07-13 04:09:58,449 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand has 4 states, 4 states have (on average 43.0) internal successors, (172), 4 states have internal predecessors, (172), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2022-07-13 04:09:58,449 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2022-07-13 04:09:58,449 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2022-07-13 04:09:58,449 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2022-07-13 04:09:58,450 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2022-07-13 04:09:58,450 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-07-13 04:09:58,450 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2022-07-13 04:09:58,450 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2022-07-13 04:09:58,450 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2022-07-13 04:09:58,450 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2022-07-13 04:09:58,450 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2022-07-13 04:09:58,450 INFO L369 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 04:09:58,450 INFO L392 hiAutomatonCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 04:09:58,451 INFO L374 stractBuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2022-07-13 04:09:58,451 INFO L287 stractBuchiCegarLoop]: ======== Iteration 8 ============ [2022-07-13 04:09:58,451 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2022-07-13 04:09:58,451 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2022-07-13 04:09:58,451 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2022-07-13 04:09:58,455 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 13.07 04:09:58 BoogieIcfgContainer [2022-07-13 04:09:58,455 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2022-07-13 04:09:58,456 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2022-07-13 04:09:58,456 INFO L271 PluginConnector]: Initializing Witness Printer... [2022-07-13 04:09:58,456 INFO L275 PluginConnector]: Witness Printer initialized [2022-07-13 04:09:58,456 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 13.07 04:08:58" (3/4) ... [2022-07-13 04:09:58,458 INFO L140 WitnessPrinter]: No result that supports witness generation found [2022-07-13 04:09:58,458 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2022-07-13 04:09:58,458 INFO L158 Benchmark]: Toolchain (without parser) took 66430.27ms. Allocated memory was 111.1MB in the beginning and 11.3GB in the end (delta: 11.2GB). Free memory was 72.2MB in the beginning and 7.3GB in the end (delta: -7.2GB). Peak memory consumption was 4.0GB. Max. memory is 16.1GB. [2022-07-13 04:09:58,459 INFO L158 Benchmark]: CDTParser took 0.14ms. Allocated memory is still 111.1MB. Free memory was 82.3MB in the beginning and 82.2MB in the end (delta: 29.0kB). There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 04:09:58,459 INFO L158 Benchmark]: CACSL2BoogieTranslator took 504.55ms. Allocated memory is still 111.1MB. Free memory was 71.9MB in the beginning and 57.4MB in the end (delta: 14.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. [2022-07-13 04:09:58,459 INFO L158 Benchmark]: Boogie Procedure Inliner took 193.81ms. Allocated memory was 111.1MB in the beginning and 138.4MB in the end (delta: 27.3MB). Free memory was 57.4MB in the beginning and 69.6MB in the end (delta: -12.1MB). Peak memory consumption was 31.8MB. Max. memory is 16.1GB. [2022-07-13 04:09:58,459 INFO L158 Benchmark]: Boogie Preprocessor took 314.56ms. Allocated memory is still 138.4MB. Free memory was 69.6MB in the beginning and 56.5MB in the end (delta: 13.1MB). Peak memory consumption was 73.3MB. Max. memory is 16.1GB. [2022-07-13 04:09:58,459 INFO L158 Benchmark]: RCFGBuilder took 5340.58ms. Allocated memory was 138.4MB in the beginning and 404.8MB in the end (delta: 266.3MB). Free memory was 56.2MB in the beginning and 266.0MB in the end (delta: -209.8MB). Peak memory consumption was 213.3MB. Max. memory is 16.1GB. [2022-07-13 04:09:58,460 INFO L158 Benchmark]: BuchiAutomizer took 60070.45ms. Allocated memory was 404.8MB in the beginning and 11.3GB in the end (delta: 10.9GB). Free memory was 266.0MB in the beginning and 7.3GB in the end (delta: -7.0GB). Peak memory consumption was 3.9GB. Max. memory is 16.1GB. [2022-07-13 04:09:58,460 INFO L158 Benchmark]: Witness Printer took 2.18ms. Allocated memory is still 11.3GB. Free memory is still 7.3GB. There was no memory consumed. Max. memory is 16.1GB. [2022-07-13 04:09:58,461 INFO L339 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.14ms. Allocated memory is still 111.1MB. Free memory was 82.3MB in the beginning and 82.2MB in the end (delta: 29.0kB). There was no memory consumed. Max. memory is 16.1GB. * CACSL2BoogieTranslator took 504.55ms. Allocated memory is still 111.1MB. Free memory was 71.9MB in the beginning and 57.4MB in the end (delta: 14.5MB). Peak memory consumption was 14.7MB. Max. memory is 16.1GB. * Boogie Procedure Inliner took 193.81ms. Allocated memory was 111.1MB in the beginning and 138.4MB in the end (delta: 27.3MB). Free memory was 57.4MB in the beginning and 69.6MB in the end (delta: -12.1MB). Peak memory consumption was 31.8MB. Max. memory is 16.1GB. * Boogie Preprocessor took 314.56ms. Allocated memory is still 138.4MB. Free memory was 69.6MB in the beginning and 56.5MB in the end (delta: 13.1MB). Peak memory consumption was 73.3MB. Max. memory is 16.1GB. * RCFGBuilder took 5340.58ms. Allocated memory was 138.4MB in the beginning and 404.8MB in the end (delta: 266.3MB). Free memory was 56.2MB in the beginning and 266.0MB in the end (delta: -209.8MB). Peak memory consumption was 213.3MB. Max. memory is 16.1GB. * BuchiAutomizer took 60070.45ms. Allocated memory was 404.8MB in the beginning and 11.3GB in the end (delta: 10.9GB). Free memory was 266.0MB in the beginning and 7.3GB in the end (delta: -7.0GB). Peak memory consumption was 3.9GB. Max. memory is 16.1GB. * Witness Printer took 2.18ms. Allocated memory is still 11.3GB. Free memory is still 7.3GB. There was no memory consumed. Max. memory is 16.1GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 8 terminating modules (7 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 7 modules have a trivial ranking function, the largest among these consists of 17 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 60.0s and 8 iterations. TraceHistogramMax:1. Analysis of lassos took 5.7s. Construction of modules took 19.1s. Büchi inclusion checks took 17.7s. Highest rank in rank-based complementation 3. Minimization of det autom 8. Minimization of nondet autom 0. Automata minimization 7.1s AutomataMinimizationTime, 6 MinimizatonAttempts, 212962 StatesRemovedByMinimization, 6 NontrivialMinimizations. Non-live state removal took 6.5s Buchi closure took 0.4s. Biggest automaton had -1 states and ocurred in iteration -1. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 0 mSolverCounterUnknown, 489163 SdHoareTripleChecker+Valid, 23.2s IncrementalHoareTripleChecker+Time, 0 mSdLazyCounter, 489162 mSDsluCounter, 690216 SdHoareTripleChecker+Invalid, 19.1s Time, 0 mProtectedAction, 0 SdHoareTripleChecker+Unchecked, 0 IncrementalHoareTripleChecker+Unchecked, 567059 mSDsCounter, 3924 IncrementalHoareTripleChecker+Valid, 0 mProtectedPredicate, 50130 IncrementalHoareTripleChecker+Invalid, 54054 SdHoareTripleChecker+Unknown, 0 mSolverCounterNotChecked, 3924 mSolverCounterUnsat, 123157 mSDtfsCounter, 50130 mSolverCounterSat, 0.8s SdHoareTripleChecker+Time, 0 IncrementalHoareTripleChecker+Unknown LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI6 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp16 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq221 hnf87 smp100 dnf187 smp100 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 20ms VariablesStem: 0 VariablesLoop: 4 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 18 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.9s InitialAbstractionConstructionTime: 0.0s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [2022-07-13 04:09:58,490 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forceful destruction successful, exit code 0 Received shutdown request... --- End real Ultimate output --- Execution finished normally Writing output log to file Ultimate.log Result: TRUE