./Ultimate.py --spec ../sv-benchmarks/c/properties/termination.prp --file ../sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version c3fed411 Calling Ultimate with: /usr/bin/java -Dosgi.configuration.area=/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/config -Xmx15G -Xms4m -jar /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/org.eclipse.equinox.launcher_1.5.800.v20200727-1323.jar -data @noDefault -ultimatedata /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data -tc /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/AutomizerTermination.xml -i ../sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c -s /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 4f7f32f81229c7756ac3848f16abf37868e5b5283c2f5648c26317015a8240dd --- Real Ultimate output --- This is Ultimate 0.2.2-tmp.no-commuhash-c3fed41 [2021-12-16 09:54:30,651 INFO L177 SettingsManager]: Resetting all preferences to default values... [2021-12-16 09:54:30,657 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2021-12-16 09:54:30,692 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2021-12-16 09:54:30,694 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2021-12-16 09:54:30,697 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2021-12-16 09:54:30,699 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2021-12-16 09:54:30,704 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2021-12-16 09:54:30,705 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2021-12-16 09:54:30,709 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2021-12-16 09:54:30,709 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2021-12-16 09:54:30,710 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2021-12-16 09:54:30,711 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2021-12-16 09:54:30,715 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2021-12-16 09:54:30,716 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2021-12-16 09:54:30,717 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2021-12-16 09:54:30,717 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2021-12-16 09:54:30,718 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2021-12-16 09:54:30,718 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2021-12-16 09:54:30,719 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2021-12-16 09:54:30,720 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2021-12-16 09:54:30,722 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2021-12-16 09:54:30,723 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2021-12-16 09:54:30,723 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2021-12-16 09:54:30,725 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2021-12-16 09:54:30,727 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2021-12-16 09:54:30,728 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2021-12-16 09:54:30,728 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2021-12-16 09:54:30,729 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2021-12-16 09:54:30,730 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2021-12-16 09:54:30,730 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2021-12-16 09:54:30,730 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2021-12-16 09:54:30,731 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2021-12-16 09:54:30,732 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2021-12-16 09:54:30,733 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2021-12-16 09:54:30,733 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2021-12-16 09:54:30,734 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2021-12-16 09:54:30,734 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2021-12-16 09:54:30,734 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2021-12-16 09:54:30,735 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2021-12-16 09:54:30,735 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2021-12-16 09:54:30,736 INFO L101 SettingsManager]: Beginning loading settings from /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/config/svcomp-Termination-32bit-Automizer_Default.epf [2021-12-16 09:54:30,752 INFO L113 SettingsManager]: Loading preferences was successful [2021-12-16 09:54:30,752 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2021-12-16 09:54:30,752 INFO L136 SettingsManager]: Preferences of UltimateCore differ from their defaults: [2021-12-16 09:54:30,752 INFO L138 SettingsManager]: * Log level for class=de.uni_freiburg.informatik.ultimate.lib.smtlibutils.quantifier.QuantifierPusher=ERROR; [2021-12-16 09:54:30,753 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * Use SBE=true [2021-12-16 09:54:30,753 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * Use old map elimination=false [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2021-12-16 09:54:30,753 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2021-12-16 09:54:30,754 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * sizeof long=4 [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * sizeof POINTER=4 [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * sizeof long double=12 [2021-12-16 09:54:30,754 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Use constant arrays=true [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2021-12-16 09:54:30,755 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2021-12-16 09:54:30,755 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2021-12-16 09:54:30,755 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2021-12-16 09:54:30,756 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2021-12-16 09:54:30,756 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR WARNING: An illegal reflective access operation has occurred WARNING: Illegal reflective access by com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 (file:/storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/plugins/com.sun.xml.bind_2.2.0.v201505121915.jar) to method java.lang.ClassLoader.defineClass(java.lang.String,byte[],int,int) WARNING: Please consider reporting this to the maintainers of com.sun.xml.bind.v2.runtime.reflect.opt.Injector$1 WARNING: Use --illegal-access=warn to enable warnings of further illegal reflective access operations WARNING: All illegal access operations will be denied in a future release Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 4f7f32f81229c7756ac3848f16abf37868e5b5283c2f5648c26317015a8240dd [2021-12-16 09:54:30,944 INFO L75 nceAwareModelManager]: Repository-Root is: /tmp [2021-12-16 09:54:30,961 INFO L261 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2021-12-16 09:54:30,962 INFO L217 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2021-12-16 09:54:30,963 INFO L271 PluginConnector]: Initializing CDTParser... [2021-12-16 09:54:30,964 INFO L275 PluginConnector]: CDTParser initialized [2021-12-16 09:54:30,965 INFO L432 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/../sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c [2021-12-16 09:54:31,007 INFO L220 CDTParser]: Created temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b69512595/1f81d6a5dddd44fc94b6ff474a518f2b/FLAGc3f1d6278 [2021-12-16 09:54:31,483 INFO L306 CDTParser]: Found 1 translation units. [2021-12-16 09:54:31,483 INFO L160 CDTParser]: Scanning /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c [2021-12-16 09:54:31,503 INFO L349 CDTParser]: About to delete temporary CDT project at /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b69512595/1f81d6a5dddd44fc94b6ff474a518f2b/FLAGc3f1d6278 [2021-12-16 09:54:31,517 INFO L357 CDTParser]: Successfully deleted /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/data/b69512595/1f81d6a5dddd44fc94b6ff474a518f2b [2021-12-16 09:54:31,520 INFO L299 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2021-12-16 09:54:31,522 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2021-12-16 09:54:31,523 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2021-12-16 09:54:31,523 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2021-12-16 09:54:31,525 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2021-12-16 09:54:31,526 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 09:54:31" (1/1) ... [2021-12-16 09:54:31,527 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@4ce00dac and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:31, skipping insertion in model container [2021-12-16 09:54:31,527 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 16.12 09:54:31" (1/1) ... [2021-12-16 09:54:31,531 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2021-12-16 09:54:31,588 INFO L178 MainTranslator]: Built tables and reachable declarations [2021-12-16 09:54:31,906 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c[73003,73016] [2021-12-16 09:54:31,906 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 09:54:31,912 INFO L203 MainTranslator]: Completed pre-run [2021-12-16 09:54:31,983 WARN L230 ndardFunctionHandler]: Function reach_error is already implemented but we override the implementation for the call at /storage/repos/ultimate/releaseScripts/default/sv-benchmarks/c/product-lines/elevator_spec3_product27.cil.c[73003,73016] [2021-12-16 09:54:31,983 INFO L209 PostProcessor]: Analyzing one entry point: main [2021-12-16 09:54:32,007 INFO L208 MainTranslator]: Completed translation [2021-12-16 09:54:32,008 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32 WrapperNode [2021-12-16 09:54:32,008 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2021-12-16 09:54:32,009 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2021-12-16 09:54:32,009 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2021-12-16 09:54:32,009 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2021-12-16 09:54:32,015 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,050 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,285 INFO L137 Inliner]: procedures = 93, calls = 348, calls flagged for inlining = 201, calls inlined = 808, statements flattened = 24315 [2021-12-16 09:54:32,286 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2021-12-16 09:54:32,287 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2021-12-16 09:54:32,287 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2021-12-16 09:54:32,287 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2021-12-16 09:54:32,292 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,292 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,332 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,333 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,459 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,579 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,630 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,711 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2021-12-16 09:54:32,713 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2021-12-16 09:54:32,713 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2021-12-16 09:54:32,713 INFO L275 PluginConnector]: RCFGBuilder initialized [2021-12-16 09:54:32,714 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (1/1) ... [2021-12-16 09:54:32,719 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:54:32,755 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:54:32,765 INFO L229 MonitoredProcess]: Starting monitored process 1 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:54:32,772 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Waiting until timeout for monitored process [2021-12-16 09:54:32,788 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocInit [2021-12-16 09:54:32,788 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2021-12-16 09:54:32,788 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2021-12-16 09:54:32,789 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2021-12-16 09:54:32,926 INFO L236 CfgBuilder]: Building ICFG [2021-12-16 09:54:32,927 INFO L262 CfgBuilder]: Building CFG for each procedure with an implementation [2021-12-16 09:54:38,449 INFO L277 CfgBuilder]: Performing block encoding [2021-12-16 09:54:38,487 INFO L296 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2021-12-16 09:54:38,487 INFO L301 CfgBuilder]: Removed 1 assume(true) statements. [2021-12-16 09:54:38,494 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 09:54:38 BoogieIcfgContainer [2021-12-16 09:54:38,494 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2021-12-16 09:54:38,496 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2021-12-16 09:54:38,496 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2021-12-16 09:54:38,498 INFO L275 PluginConnector]: BuchiAutomizer initialized [2021-12-16 09:54:38,499 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:54:38,499 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 16.12 09:54:31" (1/3) ... [2021-12-16 09:54:38,500 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@84e286d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.12 09:54:38, skipping insertion in model container [2021-12-16 09:54:38,500 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:54:38,500 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 16.12 09:54:32" (2/3) ... [2021-12-16 09:54:38,500 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@84e286d and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 16.12 09:54:38, skipping insertion in model container [2021-12-16 09:54:38,500 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2021-12-16 09:54:38,500 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 16.12 09:54:38" (3/3) ... [2021-12-16 09:54:38,501 INFO L388 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product27.cil.c [2021-12-16 09:54:38,542 INFO L359 BuchiCegarLoop]: Interprodecural is true [2021-12-16 09:54:38,542 INFO L360 BuchiCegarLoop]: Hoare is false [2021-12-16 09:54:38,542 INFO L361 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2021-12-16 09:54:38,542 INFO L362 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2021-12-16 09:54:38,542 INFO L363 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2021-12-16 09:54:38,542 INFO L364 BuchiCegarLoop]: Difference is false [2021-12-16 09:54:38,542 INFO L365 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2021-12-16 09:54:38,542 INFO L368 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2021-12-16 09:54:38,613 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6703 states, 6702 states have (on average 1.8613846612951357) internal successors, (12475), 6702 states have internal predecessors, (12475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:38,696 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1356 [2021-12-16 09:54:38,697 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:38,697 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:38,710 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:38,711 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:38,711 INFO L425 BuchiCegarLoop]: ======== Iteration 1============ [2021-12-16 09:54:38,723 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand has 6703 states, 6702 states have (on average 1.8613846612951357) internal successors, (12475), 6702 states have internal predecessors, (12475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:38,776 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1356 [2021-12-16 09:54:38,776 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:38,776 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:38,780 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:38,780 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:38,787 INFO L791 eck$LassoCheckResult]: Stem: 5454#ULTIMATE.startENTRYtrue assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3303#L-1true assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 3292#L3065true assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 3506#L3058true assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 931#L3073true main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 3687#L2368true assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 6411#L2342true assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 5589#L2457true assume { :end_inline_initFloors } true; 2819#L109true assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 5608#L1751true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 1855#L1776true bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 5071#L2735true assume 0 == initPersonOnFloor_~floor#1; 5868#L2736true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 593#L2843-1true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1814#L2527true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 4225#L2539-2true assume { :end_inline_callOnFloor } true; 995#L2879true assume { :end_inline_initPersonOnFloor } true; 4757#L2092true assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3821#L313true __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 5895#L365true __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 3531#L1850true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 2719#L1912true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 5900#L330-5true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5517#L351-5true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 1137#L1916true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 4750#L1956true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 655#L2464true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 4117#L2491true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 6214#L1600true stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 548#L982true assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6365#L313-1true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 1286#L986true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 874#L999true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1122#L1137true assume !(0 != timeShift_~tmp___9~2#1); 5505#L1228true assume !(1 == ~doorState~0); 4188#L1228-2true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 3650#L2464-3true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1806#L2491-3true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 1590#L1600-1true stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 5331#L865true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3232#L313-2true stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 5184#L878true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 3315#L1236true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 879#L922true assume !(1 == ~currentHeading~0); 5304#L932true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1869#L932-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 483#L938-1true assume { :end_inline_continueInDirection } true; 836#L1245-2true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 152#L1981true assume !(-1 == ~expectedDirection~0); 2165#L1993true assume !(1 == ~expectedDirection~0); 71#L1994true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 4460#L1260true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1455#L313-4true __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 6053#L365-3true __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 5756#L1850-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 1807#L1851-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 3759#L330-12true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 5213#L351-12true __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 3033#L1855-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 1177#L1956-1true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 3091#L2464-25true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 567#L2491-25true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2368#L1600-3true stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 5820#L982-1true assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4353#L313-5true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 1166#L986-1true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 2678#L999-1true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 1877#L1137-2true assume !(0 != timeShift_~tmp___9~2#1); 2951#L1228-3true assume 1 == ~doorState~0;~doorState~0 := 0; 1852#L1228-5true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 4930#L2464-28true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 955#L2491-28true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2534#L1600-4true stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 2967#L865-2true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 4483#L313-6true stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 3218#L878-2true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 4991#L1236-2true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 1969#L922-3true assume !(1 == ~currentHeading~0); 6035#L932-9true assume !(0 == ~currentFloorID~0); 624#L932-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1660#L938-7true assume { :end_inline_continueInDirection } true; 5845#L1245-5true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 2264#L1981-1true assume !(-1 == ~expectedDirection~0); 6016#L1993-1true assume !(1 == ~expectedDirection~0); 1185#L1994-1true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 351#L1260-1true assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 5997#L313-8true __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1499#L365-6true __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 3405#L1850-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 437#L1851-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 605#L330-24true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 4923#L351-24true __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 1627#L1855-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 4783#L1956-2true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 2527#L2464-50true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 4913#L2491-50true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 2229#L1600-6true stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 3950#L982-2true assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6043#L313-9true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 5835#L986-2true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 1928#L999-2true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 3169#L1137-4true assume !(0 != timeShift_~tmp___9~2#1); 4990#L1228-6true assume !(1 == ~doorState~0); 2613#L1228-8true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 6593#L2464-53true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 2651#L2491-53true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 5167#L1600-7true stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 2446#L865-4true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3165#L313-10true stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 6601#L878-4true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 5092#L1236-4true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 612#L922-6true assume !(1 == ~currentHeading~0); 2356#L932-18true assume !(0 == ~currentFloorID~0); 1640#L932-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3672#L938-13true assume { :end_inline_continueInDirection } true; 5173#L1245-8true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 3996#L1981-2true assume !(-1 == ~expectedDirection~0); 6446#L1993-2true assume !(1 == ~expectedDirection~0); 767#L1994-2true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1815#L1260-2true assume { :end_inline_timeShift } true; 1421#L2159true assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 4171#L1751-1true assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 6209#L1776-1true bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 1737#L2735-1true assume 0 == initPersonOnFloor_~floor#1; 1240#L2736-2true assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 6585#L2843-3true assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 1365#L2527-2true assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 2475#L2539-5true assume { :end_inline_callOnFloor } true; 1729#L2879-1true assume { :end_inline_initPersonOnFloor } true; 5244#L2092-1true assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 3064#L313-12true __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 1539#L365-9true __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 6239#L1850-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 3535#L1851-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 3327#L330-36true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 3784#L351-36true __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 5952#L1855-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 5586#L1956-3true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 5318#L2464-75true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1160#L2491-75true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4777#L1600-9true stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 4210#L982-3true assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1132#L313-13true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 4381#L986-3true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 724#L999-3true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 2061#L1137-6true assume !(0 != timeShift_~tmp___9~2#1); 5446#L1228-9true assume 1 == ~doorState~0;~doorState~0 := 0; 5759#L1228-11true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 350#L2464-78true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 3760#L2491-78true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3979#L1600-10true stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 31#L865-6true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 2860#L313-14true stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 4314#L878-6true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 5619#L1236-6true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 5378#L922-9true assume !(1 == ~currentHeading~0); 2974#L932-27true assume !(0 == ~currentFloorID~0); 4213#L932-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 944#L938-19true assume { :end_inline_continueInDirection } true; 3620#L1245-11true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 1469#L1981-3true assume !(-1 == ~expectedDirection~0); 5549#L1993-3true assume !(1 == ~expectedDirection~0); 5843#L1994-3true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1233#L1260-3true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 1683#L2174-2true [2021-12-16 09:54:38,788 INFO L793 eck$LassoCheckResult]: Loop: 1683#L2174-2true assume !false; 4083#L2175true cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 5837#L2178true assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 3600#L140true cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 532#L2182true assume 1 != cleanup_~tmp___0~12#1; 5668#L2182-1true assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 607#L2464-100true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 1629#L2491-100true anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 4867#L421true assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 5929#L485true isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 5921#L498true cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 4640#L2194true assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6486#L313-16true __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 4704#L365-12true __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 1430#L1850-4true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 6522#L1912-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 2815#L330-53true assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 1227#L351-53true __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 5015#L1916-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 2627#L1956-4true assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 2181#L2464-105true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 3286#L2491-105true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 4788#L1600-12true stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 6667#L982-4true assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 1579#L313-17true stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 6308#L986-4true assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 4410#L999-4true timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 4881#L1137-8true assume !(0 != timeShift_~tmp___9~2#1); 3012#L1228-12true assume 1 == ~doorState~0;~doorState~0 := 0; 865#L1228-14true assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 4299#L2464-108true assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 3269#L2491-108true isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 3447#L1600-13true stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 1395#L865-8true assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 6394#L313-18true stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 572#L878-8true timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 1896#L1236-8true assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 3021#L922-12true assume !(1 == ~currentHeading~0); 4586#L932-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1694#L932-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3849#L938-25true assume { :end_inline_continueInDirection } true; 1313#L1245-14true assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 3017#L1981-4true assume !(-1 == ~expectedDirection~0); 6541#L1993-4true assume !(1 == ~expectedDirection~0); 2498#L1994-4true assume { :end_inline___utac_acc__Specification3_spec__2 } true; 1268#L1260-4true assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 1683#L2174-2true [2021-12-16 09:54:38,792 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:38,793 INFO L85 PathProgramCache]: Analyzing trace with hash -1293085871, now seen corresponding path program 1 times [2021-12-16 09:54:38,798 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:38,798 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1605600204] [2021-12-16 09:54:38,799 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:38,799 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:38,929 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:39,053 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:39,053 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:39,054 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1605600204] [2021-12-16 09:54:39,054 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1605600204] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:39,054 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:39,054 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:54:39,055 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [791777106] [2021-12-16 09:54:39,056 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:39,059 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:54:39,059 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:39,059 INFO L85 PathProgramCache]: Analyzing trace with hash -88409348, now seen corresponding path program 1 times [2021-12-16 09:54:39,059 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:39,059 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [699184481] [2021-12-16 09:54:39,059 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:39,060 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:39,093 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:39,150 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:39,150 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:39,150 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [699184481] [2021-12-16 09:54:39,150 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [699184481] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:39,151 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:39,151 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2021-12-16 09:54:39,151 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [162479411] [2021-12-16 09:54:39,151 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:39,154 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:54:39,154 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:54:39,174 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2021-12-16 09:54:39,174 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2021-12-16 09:54:39,235 INFO L87 Difference]: Start difference. First operand has 6703 states, 6702 states have (on average 1.8613846612951357) internal successors, (12475), 6702 states have internal predecessors, (12475), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) Second operand has 7 states, 7 states have (on average 6.571428571428571) internal successors, (46), 7 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:46,071 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:54:46,071 INFO L93 Difference]: Finished difference Result 71138 states and 131864 transitions. [2021-12-16 09:54:46,072 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 17 states. [2021-12-16 09:54:46,075 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 71138 states and 131864 transitions. [2021-12-16 09:54:46,436 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 12135 [2021-12-16 09:54:46,885 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 71138 states to 70896 states and 131595 transitions. [2021-12-16 09:54:46,886 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 70896 [2021-12-16 09:54:46,962 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 70896 [2021-12-16 09:54:46,963 INFO L73 IsDeterministic]: Start isDeterministic. Operand 70896 states and 131595 transitions. [2021-12-16 09:54:47,048 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:54:47,049 INFO L681 BuchiCegarLoop]: Abstraction has 70896 states and 131595 transitions. [2021-12-16 09:54:47,107 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 70896 states and 131595 transitions. [2021-12-16 09:54:47,572 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 70896 to 22348. [2021-12-16 09:54:47,614 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 22348 states, 22348 states have (on average 1.8555127975657777) internal successors, (41467), 22347 states have internal predecessors, (41467), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:47,652 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 22348 states to 22348 states and 41467 transitions. [2021-12-16 09:54:47,653 INFO L704 BuchiCegarLoop]: Abstraction has 22348 states and 41467 transitions. [2021-12-16 09:54:47,653 INFO L587 BuchiCegarLoop]: Abstraction has 22348 states and 41467 transitions. [2021-12-16 09:54:47,653 INFO L425 BuchiCegarLoop]: ======== Iteration 2============ [2021-12-16 09:54:47,654 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 22348 states and 41467 transitions. [2021-12-16 09:54:47,718 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 5021 [2021-12-16 09:54:47,718 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:47,718 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:47,725 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:47,725 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:47,726 INFO L791 eck$LassoCheckResult]: Stem: 84636#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 83185#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 83169#L3065 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 83170#L3058 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 79890#L3073 main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 79891#L2368 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 83529#L2342 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 84680#L2457 assume { :end_inline_initFloors } true; 82688#L109 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 82689#L1751 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 78416#L1776 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 81422#L2735 assume 0 == initPersonOnFloor_~floor#1; 84445#L2736 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 78920#L2843-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 79245#L2527 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 78612#L2539-2 assume { :end_inline_callOnFloor } true; 80018#L2879 assume { :end_inline_initPersonOnFloor } true; 80019#L2092 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 83635#L313 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 83636#L365 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 83408#L1850 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 82569#L1912 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 82570#L330-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 79384#L351-5 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 80254#L1916 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 78233#L1956 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 79361#L2464 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 79362#L2491 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 84856#L1600 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 79149#L982 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 79151#L313-1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 80516#L986 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 78675#L999 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 79784#L1137 assume !(0 != timeShift_~tmp___9~2#1); 80232#L1228 assume !(1 == ~doorState~0); 83931#L1228-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 83507#L2464-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 81357#L2491-3 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 81022#L1600-1 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 81023#L865 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 83101#L313-2 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 83102#L878 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 83194#L1236 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 79791#L922 assume !(1 == ~currentHeading~0); 79793#L932 assume !(0 == ~currentFloorID~0); 79299#L932-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79017#L938-1 assume { :end_inline_continueInDirection } true; 79018#L1245-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 94754#L1981 assume !(-1 == ~expectedDirection~0); 94751#L1993 assume !(1 == ~expectedDirection~0); 94749#L1994 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 94748#L1260 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 94747#L313-4 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 94746#L365-3 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 84729#L1850-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 81358#L1851-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 81359#L330-12 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 79658#L351-12 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 82904#L1855-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 79808#L1956-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 80334#L2464-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 85429#L2491-25 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 85373#L1600-3 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 85357#L982-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 85356#L313-5 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 85355#L986-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 80315#L999-1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 97220#L1137-2 assume !(0 != timeShift_~tmp___9~2#1); 82815#L1228-3 assume 1 == ~doorState~0;~doorState~0 := 0; 82816#L1228-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 84365#L2464-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 84366#L2491-28 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 82340#L1600-4 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 82341#L865-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 84137#L313-6 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 83071#L878-2 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 83089#L1236-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 84405#L922-3 assume !(1 == ~currentHeading~0); 84819#L932-9 assume !(0 == ~currentFloorID~0); 79307#L932-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79308#L938-7 assume { :end_inline_continueInDirection } true; 81133#L1245-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 82001#L1981-1 assume !(-1 == ~expectedDirection~0); 82002#L1993-1 assume !(1 == ~expectedDirection~0); 80343#L1994-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 78731#L1260-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 78732#L313-8 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 80867#L365-6 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 80868#L1850-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 83288#L1851-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 79269#L330-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 79270#L351-24 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 81086#L1855-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 78025#L1956-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 84291#L2464-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 85376#L2491-50 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 85368#L1600-6 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 85360#L982-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 85359#L313-9 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 85358#L986-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 84757#L999-2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 99827#L1137-4 assume !(0 != timeShift_~tmp___9~2#1); 84403#L1228-6 assume !(1 == ~doorState~0); 84404#L1228-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 84906#L2464-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 84907#L2491-53 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 84491#L1600-7 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 84492#L865-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 83041#L313-10 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 82660#L878-4 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 84908#L1236-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 79283#L922-6 assume !(1 == ~currentHeading~0); 79284#L932-18 assume !(0 == ~currentFloorID~0); 80722#L932-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 81105#L938-13 assume { :end_inline_continueInDirection } true; 79098#L1245-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 83776#L1981-2 assume !(-1 == ~expectedDirection~0); 77942#L1993-2 assume !(1 == ~expectedDirection~0); 79574#L1994-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 79575#L1260-2 assume { :end_inline_timeShift } true; 80727#L2159 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 80728#L1751-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 81844#L1776-1 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 81249#L2735-1 assume 0 == initPersonOnFloor_~floor#1; 80431#L2736-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 78491#L2843-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 80635#L2527-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 78214#L2539-5 assume { :end_inline_callOnFloor } true; 96280#L2879-1 assume { :end_inline_initPersonOnFloor } true; 84536#L2092-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 82941#L313-12 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 80940#L365-9 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 80941#L1850-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 83412#L1851-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 83207#L330-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 78207#L351-36 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 83601#L1855-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 78457#L1956-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 84569#L2464-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 80301#L2491-75 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 80302#L1600-9 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 83945#L982-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 83946#L313-13 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 85363#L986-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 79485#L999-3 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 79486#L1137-6 assume !(0 != timeShift_~tmp___9~2#1); 81727#L1228-9 assume 1 == ~doorState~0;~doorState~0 := 0; 84632#L1228-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 78729#L2464-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 78730#L2491-78 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 83765#L1600-10 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 83766#L865-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 82726#L313-14 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 78353#L878-6 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 84024#L1236-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 84597#L922-9 assume !(1 == ~currentHeading~0); 82843#L932-27 assume !(0 == ~currentFloorID~0); 81191#L932-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 79911#L938-19 assume { :end_inline_continueInDirection } true; 79912#L1245-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 96341#L1981-3 assume !(-1 == ~expectedDirection~0); 96334#L1993-3 assume !(1 == ~expectedDirection~0); 96324#L1994-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 96321#L1260-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 96318#L2174-2 [2021-12-16 09:54:47,728 INFO L793 eck$LassoCheckResult]: Loop: 96318#L2174-2 assume !false; 96312#L2175 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 96310#L2178 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 96308#L140 cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 96304#L2182 assume 1 != cleanup_~tmp___0~12#1; 96300#L2182-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 96299#L2464-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 96298#L2491-100 anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 96292#L421 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 96283#L485 isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 96282#L498 cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 84215#L2194 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 84216#L313-16 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 84246#L365-12 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 80744#L1850-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 80745#L1851-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 84764#L330-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 83627#L351-48 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 82047#L1855-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 78209#L1956-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 85401#L2464-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 85398#L2491-105 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 85371#L1600-12 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 85364#L982-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 85362#L313-17 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 85361#L986-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 84088#L999-4 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 84089#L1137-8 assume !(0 != timeShift_~tmp___9~2#1); 84342#L1228-12 assume 1 == ~doorState~0;~doorState~0 := 0; 79769#L1228-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 79770#L2464-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 83146#L2491-108 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 83147#L1600-13 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 80684#L865-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 80685#L313-18 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 99997#L878-8 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 99992#L1236-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 82893#L922-12 assume !(1 == ~currentHeading~0); 82894#L932-36 assume !(0 == ~currentFloorID~0); 81186#L932-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 81187#L938-25 assume { :end_inline_continueInDirection } true; 79378#L1245-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 96337#L1981-4 assume !(-1 == ~expectedDirection~0); 96330#L1993-4 assume !(1 == ~expectedDirection~0); 96323#L1994-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 96320#L1260-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 96318#L2174-2 [2021-12-16 09:54:47,728 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:47,729 INFO L85 PathProgramCache]: Analyzing trace with hash 1909246223, now seen corresponding path program 1 times [2021-12-16 09:54:47,729 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:47,729 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1355389763] [2021-12-16 09:54:47,730 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:47,730 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:47,876 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:47,920 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:47,920 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:47,920 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1355389763] [2021-12-16 09:54:47,921 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1355389763] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:47,921 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:47,921 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:54:47,921 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [996393134] [2021-12-16 09:54:47,921 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:47,922 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:54:47,922 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:47,922 INFO L85 PathProgramCache]: Analyzing trace with hash 1174699871, now seen corresponding path program 1 times [2021-12-16 09:54:47,922 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:47,922 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [619240745] [2021-12-16 09:54:47,923 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:47,923 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:47,931 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:47,951 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:47,952 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:47,952 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [619240745] [2021-12-16 09:54:47,952 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [619240745] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:47,952 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:47,952 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2021-12-16 09:54:47,953 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [966544354] [2021-12-16 09:54:47,953 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:47,953 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:54:47,953 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:54:47,954 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2021-12-16 09:54:47,954 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2021-12-16 09:54:47,954 INFO L87 Difference]: Start difference. First operand 22348 states and 41467 transitions. cyclomatic complexity: 19122 Second operand has 5 states, 5 states have (on average 9.2) internal successors, (46), 5 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:48,510 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:54:48,510 INFO L93 Difference]: Finished difference Result 44265 states and 81820 transitions. [2021-12-16 09:54:48,511 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2021-12-16 09:54:48,511 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 44265 states and 81820 transitions. [2021-12-16 09:54:48,675 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 10138 [2021-12-16 09:54:48,806 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 44265 states to 44265 states and 81820 transitions. [2021-12-16 09:54:48,806 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 44265 [2021-12-16 09:54:48,846 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 44265 [2021-12-16 09:54:48,847 INFO L73 IsDeterministic]: Start isDeterministic. Operand 44265 states and 81820 transitions. [2021-12-16 09:54:48,887 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:54:48,887 INFO L681 BuchiCegarLoop]: Abstraction has 44265 states and 81820 transitions. [2021-12-16 09:54:48,916 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 44265 states and 81820 transitions. [2021-12-16 09:54:49,477 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 44265 to 43089. [2021-12-16 09:54:49,529 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 43089 states, 43089 states have (on average 1.8547193019100003) internal successors, (79918), 43088 states have internal predecessors, (79918), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:49,595 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 43089 states to 43089 states and 79918 transitions. [2021-12-16 09:54:49,595 INFO L704 BuchiCegarLoop]: Abstraction has 43089 states and 79918 transitions. [2021-12-16 09:54:49,595 INFO L587 BuchiCegarLoop]: Abstraction has 43089 states and 79918 transitions. [2021-12-16 09:54:49,596 INFO L425 BuchiCegarLoop]: ======== Iteration 3============ [2021-12-16 09:54:49,596 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 43089 states and 79918 transitions. [2021-12-16 09:54:49,829 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 9682 [2021-12-16 09:54:49,829 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:49,829 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:49,836 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:49,836 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:49,838 INFO L791 eck$LassoCheckResult]: Stem: 151548#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 149942#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 149925#L3065 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 149926#L3058 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 146544#L3073 main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 146545#L2368 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 150299#L2342 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 151608#L2457 assume { :end_inline_initFloors } true; 149426#L109 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 149427#L1751 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 145050#L1776 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 148101#L2735 assume 0 == initPersonOnFloor_~floor#1; 151317#L2736 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 145561#L2843-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 145887#L2527 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 145246#L2539-2 assume { :end_inline_callOnFloor } true; 146670#L2879 assume { :end_inline_initPersonOnFloor } true; 146671#L2092 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 150410#L313 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 150411#L365 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 150174#L1850 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 149303#L1912 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 149304#L330-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 146027#L351-5 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 146912#L1916 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 146913#L1956 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 152171#L2464 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 152166#L2491 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 152165#L1600 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 152145#L982 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 152139#L313-1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 152135#L986 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 152134#L999 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 152132#L1137 assume !(0 != timeShift_~tmp___9~2#1); 152130#L1228 assume !(1 == ~doorState~0); 152129#L1228-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 152125#L2464-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 152122#L2491-3 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 152119#L1600-1 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 152033#L865 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 152020#L313-2 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 152021#L878 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 151986#L1236 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 151988#L922 assume !(1 == ~currentHeading~0); 151458#L932 assume !(0 == ~currentFloorID~0); 145940#L932-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145659#L938-1 assume { :end_inline_continueInDirection } true; 145660#L1245-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 144895#L1981 assume !(-1 == ~expectedDirection~0); 144896#L1993 assume !(1 == ~expectedDirection~0); 148577#L1994 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 150940#L1260 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 150941#L313-4 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 164736#L365-3 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 152672#L1850-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 148543#L1912-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 147092#L330-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 146250#L351-17 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 146497#L1916-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 146498#L1956-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 166929#L2464-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 166862#L2491-25 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 166861#L1600-3 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 164737#L982-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 164738#L313-5 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 165711#L986-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 161256#L999-1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 161250#L1137-2 assume !(0 != timeShift_~tmp___9~2#1); 149560#L1228-3 assume 1 == ~doorState~0;~doorState~0 := 0; 148096#L1228-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 148097#L2464-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 151221#L2491-28 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 165906#L1600-4 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 165896#L865-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 165897#L313-6 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 165832#L878-2 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 165833#L1236-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 166597#L922-3 assume !(1 == ~currentHeading~0); 165815#L932-9 assume !(0 == ~currentFloorID~0); 165804#L932-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 164808#L938-7 assume { :end_inline_continueInDirection } true; 164806#L1245-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 164794#L1981-1 assume !(-1 == ~expectedDirection~0); 164789#L1993-1 assume !(1 == ~expectedDirection~0); 164786#L1994-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 163018#L1260-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 157833#L313-8 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 157832#L365-6 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 157826#L1850-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 157824#L1912-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 151236#L330-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 144852#L351-29 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 149943#L1916-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 144657#L1956-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 149055#L2464-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 149056#L2491-50 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 148661#L1600-6 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 148662#L982-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 150527#L313-9 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 151786#L986-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 160398#L999-2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 160391#L1137-4 assume !(0 != timeShift_~tmp___9~2#1); 160392#L1228-6 assume !(1 == ~doorState~0); 170554#L1228-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 170553#L2464-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 170552#L2491-53 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 170551#L1600-7 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 170550#L865-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 170303#L313-10 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 170300#L878-4 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 151324#L1236-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 151325#L922-6 assume !(1 == ~currentHeading~0); 148827#L932-18 assume !(0 == ~currentFloorID~0); 147391#L932-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 150292#L938-13 assume { :end_inline_continueInDirection } true; 145740#L1245-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 176724#L1981-2 assume !(-1 == ~expectedDirection~0); 176720#L1993-2 assume !(1 == ~expectedDirection~0); 176718#L1994-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 176717#L1260-2 assume { :end_inline_timeShift } true; 176716#L2159 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 176710#L1751-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 176709#L1776-1 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 176707#L2735-1 assume 0 == initPersonOnFloor_~floor#1; 176693#L2736-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 176675#L2843-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 176673#L2527-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 176297#L2539-5 assume { :end_inline_callOnFloor } true; 176296#L2879-1 assume { :end_inline_initPersonOnFloor } true; 176238#L2092-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 157846#L313-12 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 157845#L365-9 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 157843#L1850-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 157842#L1912-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 157838#L330-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 157835#L351-41 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 157814#L1916-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 157813#L1956-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 157795#L2464-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 157794#L2491-75 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 157793#L1600-9 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 157790#L982-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 157791#L313-13 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 169967#L986-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 155016#L999-3 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 155010#L1137-6 assume !(0 != timeShift_~tmp___9~2#1); 151541#L1228-9 assume 1 == ~doorState~0;~doorState~0 := 0; 151542#L1228-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 151675#L2464-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 168714#L2491-78 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 179760#L1600-10 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 179759#L865-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 178641#L313-14 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 178642#L878-6 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 180094#L1236-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 180095#L922-9 assume !(1 == ~currentHeading~0); 149588#L932-27 assume !(0 == ~currentFloorID~0); 147861#L932-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 146564#L938-19 assume { :end_inline_continueInDirection } true; 146565#L1245-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 147479#L1981-3 assume !(-1 == ~expectedDirection~0); 147480#L1993-3 assume !(1 == ~expectedDirection~0); 149787#L1994-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 147085#L1260-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 147086#L2174-2 [2021-12-16 09:54:49,839 INFO L793 eck$LassoCheckResult]: Loop: 147086#L2174-2 assume !false; 147835#L2175 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 150639#L2178 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 150231#L140 cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 145763#L2182 assume 1 != cleanup_~tmp___0~12#1; 145764#L2182-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 145914#L2464-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 145915#L2491-100 anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 151187#L421 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 145345#L485 isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 186755#L498 cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 151048#L2194 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 151049#L313-16 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 184953#L365-12 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 184952#L1850-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 179915#L1851-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 184951#L330-48 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 184971#L351-48 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 164799#L1855-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 164796#L1956-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 164787#L2464-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 164785#L2491-105 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 164784#L1600-12 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 164783#L982-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 164743#L313-17 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 164740#L986-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 150897#L999-4 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 150898#L1137-8 assume !(0 != timeShift_~tmp___9~2#1); 149626#L1228-12 assume 1 == ~doorState~0;~doorState~0 := 0; 146422#L1228-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 146423#L2464-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 150817#L2491-108 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 157908#L1600-13 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 157902#L865-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 152694#L313-18 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 152693#L878-8 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 152691#L1236-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 152692#L922-12 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; 147521#L3038-21 continueInDirection_#t~ret27#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1; 147522#L926-36 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 148779#L932-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 147854#L938-25 assume { :end_inline_continueInDirection } true; 147223#L1245-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 147224#L1981-4 assume !(-1 == ~expectedDirection~0); 149632#L1993-4 assume !(1 == ~expectedDirection~0); 148551#L1994-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 147154#L1260-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 147086#L2174-2 [2021-12-16 09:54:49,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:49,843 INFO L85 PathProgramCache]: Analyzing trace with hash 405545694, now seen corresponding path program 1 times [2021-12-16 09:54:49,843 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:49,843 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1760056452] [2021-12-16 09:54:49,843 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:49,843 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:49,866 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:49,913 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:49,916 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:49,916 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1760056452] [2021-12-16 09:54:49,916 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1760056452] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:49,917 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:49,917 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:54:49,917 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [967566397] [2021-12-16 09:54:49,917 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:49,918 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:54:49,919 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:49,919 INFO L85 PathProgramCache]: Analyzing trace with hash -530480544, now seen corresponding path program 1 times [2021-12-16 09:54:49,919 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:49,919 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1167248216] [2021-12-16 09:54:49,920 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:49,920 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:49,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:49,954 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:49,954 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:49,955 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1167248216] [2021-12-16 09:54:49,955 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1167248216] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:49,955 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:49,955 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:54:49,955 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [449213454] [2021-12-16 09:54:49,956 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:49,956 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:54:49,956 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:54:49,956 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 09:54:49,957 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 09:54:49,957 INFO L87 Difference]: Start difference. First operand 43089 states and 79918 transitions. cyclomatic complexity: 36833 Second operand has 3 states, 3 states have (on average 15.666666666666666) internal successors, (47), 3 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:50,274 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:54:50,274 INFO L93 Difference]: Finished difference Result 57945 states and 107425 transitions. [2021-12-16 09:54:50,274 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 09:54:50,276 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 57945 states and 107425 transitions. [2021-12-16 09:54:50,655 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 13479 [2021-12-16 09:54:50,834 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 57945 states to 57925 states and 107389 transitions. [2021-12-16 09:54:50,834 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 57925 [2021-12-16 09:54:50,881 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 57925 [2021-12-16 09:54:50,882 INFO L73 IsDeterministic]: Start isDeterministic. Operand 57925 states and 107389 transitions. [2021-12-16 09:54:50,934 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:54:50,934 INFO L681 BuchiCegarLoop]: Abstraction has 57925 states and 107389 transitions. [2021-12-16 09:54:50,966 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 57925 states and 107389 transitions. [2021-12-16 09:54:51,519 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 57925 to 57893. [2021-12-16 09:54:51,579 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 57893 states, 57893 states have (on average 1.8541274420050784) internal successors, (107341), 57892 states have internal predecessors, (107341), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:51,672 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 57893 states to 57893 states and 107341 transitions. [2021-12-16 09:54:51,673 INFO L704 BuchiCegarLoop]: Abstraction has 57893 states and 107341 transitions. [2021-12-16 09:54:51,673 INFO L587 BuchiCegarLoop]: Abstraction has 57893 states and 107341 transitions. [2021-12-16 09:54:51,673 INFO L425 BuchiCegarLoop]: ======== Iteration 4============ [2021-12-16 09:54:51,673 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 57893 states and 107341 transitions. [2021-12-16 09:54:51,812 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 13471 [2021-12-16 09:54:51,812 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:51,812 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:51,816 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:51,816 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:51,816 INFO L791 eck$LassoCheckResult]: Stem: 252374#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 250899#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 250883#L3065 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 250884#L3058 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 247566#L3073 main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 247567#L2368 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 251247#L2342 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 252432#L2457 assume { :end_inline_initFloors } true; 250395#L109 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 250396#L1751 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 246092#L1776 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 249116#L2735 assume 0 == initPersonOnFloor_~floor#1; 252178#L2736 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 246596#L2843-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 246921#L2527 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 246286#L2539-2 assume { :end_inline_callOnFloor } true; 247694#L2879 assume { :end_inline_initPersonOnFloor } true; 247695#L2092 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 251357#L313 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 251358#L365 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 251121#L1850 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 250275#L1912 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 250276#L330-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 247057#L351-5 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 247936#L1916 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 247937#L1956 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 253060#L2464 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 253061#L2491 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 253201#L1600 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 253195#L982 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 253193#L313-1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 253188#L986 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 253187#L999 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 253185#L1137 assume !(0 != timeShift_~tmp___9~2#1); 253184#L1228 assume !(1 == ~doorState~0); 253183#L1228-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 253182#L2464-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 253015#L2491-3 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 253176#L1600-1 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 253175#L865 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 253095#L313-2 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 253094#L878 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 253092#L1236 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 247467#L922 assume !(1 == ~currentHeading~0); 247468#L932 assume !(0 == ~currentFloorID~0); 252297#L932-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 246693#L938-1 assume { :end_inline_continueInDirection } true; 246694#L1245-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 245936#L1981 assume !(-1 == ~expectedDirection~0); 245937#L1993 assume !(1 == ~expectedDirection~0); 245735#L1994 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 245736#L1260 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 248468#L313-4 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 248469#L365-3 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 252595#L1850-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 249547#L1912-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 248114#L330-17 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 247274#L351-17 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 247520#L1916-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 247521#L1956-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 248020#L2464-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 246861#L2491-25 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 246862#L1600-3 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 249828#L982-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 252511#L313-5 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 282661#L986-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 267365#L999-1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 267362#L1137-2 assume !(0 != timeShift_~tmp___9~2#1); 267360#L1228-3 assume 1 == ~doorState~0;~doorState~0 := 0; 267359#L1228-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 267358#L2464-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 254974#L2491-28 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 267353#L1600-4 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 267350#L865-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 267304#L313-6 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 267298#L878-2 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 267295#L1236-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 256131#L922-3 assume !(1 == ~currentHeading~0); 252589#L932-9 assume !(0 == ~currentFloorID~0); 250150#L932-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 255095#L938-7 assume { :end_inline_continueInDirection } true; 255094#L1245-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 255090#L1981-1 assume !(-1 == ~expectedDirection~0); 255087#L1993-1 assume !(1 == ~expectedDirection~0); 255085#L1994-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 255084#L1260-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 254690#L313-8 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 254687#L365-6 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 254685#L1850-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 254684#L1912-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 254632#L330-29 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 254627#L351-29 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 254477#L1916-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 254469#L1956-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 254445#L2464-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 254417#L2491-50 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 254428#L1600-6 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 254423#L982-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 254424#L313-9 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 254426#L986-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 254427#L999-2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 259693#L1137-4 assume !(0 != timeShift_~tmp___9~2#1); 259691#L1228-6 assume !(1 == ~doorState~0); 259690#L1228-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 259689#L2464-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 259666#L2491-53 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 259688#L1600-7 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 259687#L865-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 259178#L313-10 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 259177#L878-4 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 253444#L1236-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 253446#L922-6 assume !(1 == ~currentHeading~0); 261362#L932-18 assume !(0 == ~currentFloorID~0); 261361#L932-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 260931#L938-13 assume { :end_inline_continueInDirection } true; 260930#L1245-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 260928#L1981-2 assume !(-1 == ~expectedDirection~0); 260925#L1993-2 assume !(1 == ~expectedDirection~0); 260923#L1994-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 260922#L1260-2 assume { :end_inline_timeShift } true; 260921#L2159 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 260915#L1751-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 260914#L1776-1 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 260913#L2735-1 assume 0 == initPersonOnFloor_~floor#1; 260896#L2736-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 260878#L2843-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 260876#L2527-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 260872#L2539-5 assume { :end_inline_callOnFloor } true; 260871#L2879-1 assume { :end_inline_initPersonOnFloor } true; 260870#L2092-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 260869#L313-12 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 260868#L365-9 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 260862#L1850-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 260859#L1912-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 260860#L330-41 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 261374#L351-41 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 260837#L1916-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 260836#L1956-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 260833#L2464-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 257095#L2491-75 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 260830#L1600-9 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 260828#L982-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 260829#L313-13 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 260834#L986-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 260835#L999-3 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 273127#L1137-6 assume !(0 != timeShift_~tmp___9~2#1); 268990#L1228-9 assume 1 == ~doorState~0;~doorState~0 := 0; 260721#L1228-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 256985#L2464-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 256981#L2491-78 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 256978#L1600-10 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 256974#L865-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 256975#L313-14 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 263111#L878-6 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 263108#L1236-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 263089#L922-9 assume !(1 == ~currentHeading~0); 263082#L932-27 assume !(0 == ~currentFloorID~0); 263076#L932-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 260292#L938-19 assume { :end_inline_continueInDirection } true; 260291#L1245-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 260289#L1981-3 assume !(-1 == ~expectedDirection~0); 260286#L1993-3 assume !(1 == ~expectedDirection~0); 260280#L1994-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 260278#L1260-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 260276#L2174-2 [2021-12-16 09:54:51,817 INFO L793 eck$LassoCheckResult]: Loop: 260276#L2174-2 assume !false; 260275#L2175 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 260274#L2178 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 260273#L140 cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 260272#L2182 assume 1 != cleanup_~tmp___0~12#1; 260271#L2182-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 260266#L2464-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 260264#L2491-100 anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 260248#L421 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 260239#L485 isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 260238#L498 cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 260237#L2194 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 260232#L313-16 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 260230#L365-12 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 260228#L1850-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 260226#L1912-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 260227#L330-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 260231#L351-53 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 260207#L1916-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 260202#L1956-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 260201#L2464-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 259994#L2491-105 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 260200#L1600-12 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 260197#L982-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 260199#L313-17 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 260203#L986-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 260204#L999-4 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 287108#L1137-8 assume !(0 != timeShift_~tmp___9~2#1); 287105#L1228-12 assume 1 == ~doorState~0;~doorState~0 := 0; 287104#L1228-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 287102#L2464-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 280665#L2491-108 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 287101#L1600-13 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 287100#L865-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 283883#L313-18 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 283880#L878-8 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 283877#L1236-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 283875#L922-12 assume !(1 == ~currentHeading~0); 265580#L932-36 assume !(0 == ~currentFloorID~0); 265574#L932-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 265384#L938-25 assume { :end_inline_continueInDirection } true; 265381#L1245-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 265378#L1981-4 assume !(-1 == ~expectedDirection~0); 265375#L1993-4 assume !(1 == ~expectedDirection~0); 265374#L1994-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 260277#L1260-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 260276#L2174-2 [2021-12-16 09:54:51,818 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:51,818 INFO L85 PathProgramCache]: Analyzing trace with hash -2114414240, now seen corresponding path program 1 times [2021-12-16 09:54:51,818 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:51,818 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [976480799] [2021-12-16 09:54:51,818 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:51,819 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:51,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:51,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:51,869 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:51,870 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [976480799] [2021-12-16 09:54:51,870 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [976480799] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:51,870 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:51,871 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:54:51,873 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103371515] [2021-12-16 09:54:51,873 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:51,874 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:54:51,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:51,875 INFO L85 PathProgramCache]: Analyzing trace with hash 877251388, now seen corresponding path program 1 times [2021-12-16 09:54:51,875 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:51,877 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1046367710] [2021-12-16 09:54:51,878 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:51,878 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:51,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:51,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:51,900 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:51,900 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1046367710] [2021-12-16 09:54:51,900 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1046367710] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:51,900 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:51,900 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2021-12-16 09:54:51,900 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [428594623] [2021-12-16 09:54:51,901 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:51,901 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:54:51,901 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:54:51,901 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2021-12-16 09:54:51,901 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2021-12-16 09:54:51,902 INFO L87 Difference]: Start difference. First operand 57893 states and 107341 transitions. cyclomatic complexity: 49452 Second operand has 3 states, 3 states have (on average 15.333333333333334) internal successors, (46), 3 states have internal predecessors, (46), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:52,443 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:54:52,443 INFO L93 Difference]: Finished difference Result 79509 states and 147244 transitions. [2021-12-16 09:54:52,444 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2021-12-16 09:54:52,444 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 79509 states and 147244 transitions. [2021-12-16 09:54:52,823 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 18500 [2021-12-16 09:54:53,020 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 79509 states to 79509 states and 147244 transitions. [2021-12-16 09:54:53,020 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 79509 [2021-12-16 09:54:53,077 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 79509 [2021-12-16 09:54:53,077 INFO L73 IsDeterministic]: Start isDeterministic. Operand 79509 states and 147244 transitions. [2021-12-16 09:54:53,284 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:54:53,284 INFO L681 BuchiCegarLoop]: Abstraction has 79509 states and 147244 transitions. [2021-12-16 09:54:53,305 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 79509 states and 147244 transitions. [2021-12-16 09:54:53,869 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 79509 to 78318. [2021-12-16 09:54:53,937 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 78318 states, 78318 states have (on average 1.8538777803314692) internal successors, (145192), 78317 states have internal predecessors, (145192), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:54:54,063 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 78318 states to 78318 states and 145192 transitions. [2021-12-16 09:54:54,064 INFO L704 BuchiCegarLoop]: Abstraction has 78318 states and 145192 transitions. [2021-12-16 09:54:54,064 INFO L587 BuchiCegarLoop]: Abstraction has 78318 states and 145192 transitions. [2021-12-16 09:54:54,064 INFO L425 BuchiCegarLoop]: ======== Iteration 5============ [2021-12-16 09:54:54,064 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 78318 states and 145192 transitions. [2021-12-16 09:54:54,430 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 17963 [2021-12-16 09:54:54,430 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:54:54,430 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:54:54,444 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:54,444 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:54:54,444 INFO L791 eck$LassoCheckResult]: Stem: 389870#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 388338#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 388321#L3065 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 388322#L3058 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 384979#L3073 main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 384980#L2368 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 388684#L2342 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 389927#L2457 assume { :end_inline_initFloors } true; 387823#L109 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 387824#L1751 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 383502#L1776 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 386531#L2735 assume 0 == initPersonOnFloor_~floor#1; 389653#L2736 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 384005#L2843-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 384333#L2527 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 383695#L2539-2 assume { :end_inline_callOnFloor } true; 385107#L2879 assume { :end_inline_initPersonOnFloor } true; 385108#L2092 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 388797#L313 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 388798#L365 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 388561#L1850 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 387703#L1912 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 385353#L1922 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 384133#L1933 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 384135#L1944 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 387854#L1955 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 385861#L1956 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 399895#L2464 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 389058#L2491 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 389059#L1600 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 384236#L982 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 384238#L313-1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 385622#L986 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 383759#L999 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 384872#L1137 assume !(0 != timeShift_~tmp___9~2#1); 385329#L1228 assume !(1 == ~doorState~0); 389109#L1228-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 388661#L2464-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 386465#L2491-3 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 386125#L1600-1 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 386126#L865 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 388249#L313-2 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 388250#L878 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 388347#L1236 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 384879#L922 assume !(1 == ~currentHeading~0); 384880#L932 assume !(0 == ~currentFloorID~0); 413133#L932-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 413130#L938-1 assume { :end_inline_continueInDirection } true; 413131#L1245-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 413127#L1981 assume !(-1 == ~expectedDirection~0); 413128#L1993 assume !(1 == ~expectedDirection~0); 412897#L1994 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 406053#L1260 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 406050#L313-4 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 406049#L365-3 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 390524#L1850-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 386963#L1912-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 386964#L1922-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 383559#L1933-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 383561#L1944-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 385095#L1955-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 406494#L1956-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 406491#L2464-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 396854#L2491-25 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 406488#L1600-3 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 406485#L982-1 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 406483#L313-5 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 406480#L986-1 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 406481#L999-1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 408863#L1137-2 assume !(0 != timeShift_~tmp___9~2#1); 408860#L1228-3 assume 1 == ~doorState~0;~doorState~0 := 0; 408438#L1228-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 408432#L2464-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 397969#L2491-28 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 408430#L1600-4 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 408423#L865-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 408421#L313-6 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 408416#L878-2 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 408176#L1236-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 386709#L922-3 assume !(1 == ~currentHeading~0); 386710#L932-9 assume !(0 == ~currentFloorID~0); 384390#L932-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 384391#L938-7 assume { :end_inline_continueInDirection } true; 390032#L1245-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 390033#L1981-1 assume !(-1 == ~expectedDirection~0); 416858#L1993-1 assume !(1 == ~expectedDirection~0); 385447#L1994-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 383814#L1260-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 383815#L313-8 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 413136#L365-6 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 413137#L1850-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 388610#L1912-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 388611#L1922-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 389117#L1933-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 388619#L1944-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 410613#L1955-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 410610#L1956-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 410609#L2464-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 391859#L2491-50 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 410608#L1600-6 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 410602#L982-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 410603#L313-9 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 412005#L986-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 412006#L999-2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 388187#L1137-4 assume !(0 != timeShift_~tmp___9~2#1); 388189#L1228-6 assume !(1 == ~doorState~0); 389608#L1228-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 414100#L2464-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 414099#L2491-53 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 414098#L1600-7 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 414096#L865-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 414097#L313-10 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 423436#L878-4 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 423435#L1236-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 384369#L922-6 assume !(1 == ~currentHeading~0); 384370#L932-18 assume !(0 == ~currentFloorID~0); 385824#L932-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 386208#L938-13 assume { :end_inline_continueInDirection } true; 384185#L1245-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 456666#L1981-2 assume !(-1 == ~expectedDirection~0); 456661#L1993-2 assume !(1 == ~expectedDirection~0); 384658#L1994-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 384659#L1260-2 assume { :end_inline_timeShift } true; 385829#L2159 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 385830#L1751-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 452097#L1776-1 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 452096#L2735-1 assume 0 == initPersonOnFloor_~floor#1; 451135#L2736-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 451117#L2843-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 451115#L2527-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 451049#L2539-5 assume { :end_inline_callOnFloor } true; 451048#L2879-1 assume { :end_inline_initPersonOnFloor } true; 444800#L2092-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 444799#L313-12 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 444798#L365-9 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 444796#L1850-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 444797#L1912-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 445245#L1922-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 445249#L1933-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 445253#L1944-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 445247#L1955-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 445251#L1956-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 446990#L2464-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 421826#L2491-75 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 446989#L1600-9 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 446988#L982-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 446987#L313-13 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 431239#L986-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 384570#L999-3 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 384571#L1137-6 assume !(0 != timeShift_~tmp___9~2#1); 386837#L1228-9 assume 1 == ~doorState~0;~doorState~0 := 0; 389866#L1228-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 452270#L2464-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 424568#L2491-78 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 452263#L1600-10 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 383043#L865-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 383044#L313-14 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 389206#L878-6 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 389207#L1236-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 389830#L922-9 assume !(1 == ~currentHeading~0); 387986#L932-27 assume !(0 == ~currentFloorID~0); 386296#L932-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 389127#L938-19 assume { :end_inline_continueInDirection } true; 447182#L1245-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 447180#L1981-3 assume !(-1 == ~expectedDirection~0); 447178#L1993-3 assume !(1 == ~expectedDirection~0); 447172#L1994-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 447170#L1260-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 447166#L2174-2 [2021-12-16 09:54:54,445 INFO L793 eck$LassoCheckResult]: Loop: 447166#L2174-2 assume !false; 447165#L2175 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 447163#L2178 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 447162#L140 cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 447161#L2182 assume 1 != cleanup_~tmp___0~12#1; 447160#L2182-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 447159#L2464-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 447158#L2491-100 anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 447068#L421 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 447058#L485 isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 447042#L498 cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 444611#L2194 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 444610#L313-16 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 444609#L365-12 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 444607#L1850-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 444605#L1912-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 444602#L1922-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 444599#L1933-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 444588#L1944-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 444586#L1955-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 444583#L1956-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 444582#L2464-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 420339#L2491-105 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 444581#L1600-12 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 444579#L982-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 444580#L313-17 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 445898#L986-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 445899#L999-4 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 450136#L1137-8 assume !(0 != timeShift_~tmp___9~2#1); 450135#L1228-12 assume 1 == ~doorState~0;~doorState~0 := 0; 450134#L1228-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 450122#L2464-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 427576#L2491-108 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 449221#L1600-13 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 449188#L865-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 449127#L313-18 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 449118#L878-8 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 449114#L1236-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 449106#L922-12 assume !(1 == ~currentHeading~0); 449099#L932-36 assume !(0 == ~currentFloorID~0); 386291#L932-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 386292#L938-25 assume { :end_inline_continueInDirection } true; 449087#L1245-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 449085#L1981-4 assume !(-1 == ~expectedDirection~0); 449076#L1993-4 assume !(1 == ~expectedDirection~0); 449070#L1994-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 447169#L1260-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 447166#L2174-2 [2021-12-16 09:54:54,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:54,445 INFO L85 PathProgramCache]: Analyzing trace with hash -1127806338, now seen corresponding path program 1 times [2021-12-16 09:54:54,445 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:54,445 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [625614276] [2021-12-16 09:54:54,445 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:54,445 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:54,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:54,504 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:54,504 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:54,504 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [625614276] [2021-12-16 09:54:54,505 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [625614276] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:54,505 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:54,505 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:54:54,505 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1251377304] [2021-12-16 09:54:54,505 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:54,505 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:54:54,506 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:54:54,506 INFO L85 PathProgramCache]: Analyzing trace with hash -937299723, now seen corresponding path program 1 times [2021-12-16 09:54:54,506 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:54:54,506 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1862128366] [2021-12-16 09:54:54,506 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:54:54,506 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:54:54,523 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:54:54,810 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:54:54,810 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:54:54,810 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1862128366] [2021-12-16 09:54:54,810 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [1862128366] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:54:54,810 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:54:54,811 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [17] imperfect sequences [] total 17 [2021-12-16 09:54:54,811 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1583647980] [2021-12-16 09:54:54,811 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:54:54,811 INFO L808 eck$LassoCheckResult]: loop already infeasible [2021-12-16 09:54:54,811 INFO L103 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2021-12-16 09:54:54,811 INFO L143 InterpolantAutomaton]: Constructing interpolant automaton starting with 17 interpolants. [2021-12-16 09:54:54,811 INFO L145 InterpolantAutomaton]: CoverageRelationStatistics Valid=40, Invalid=232, Unknown=0, NotChecked=0, Total=272 [2021-12-16 09:54:54,812 INFO L87 Difference]: Start difference. First operand 78318 states and 145192 transitions. cyclomatic complexity: 66878 Second operand has 17 states, 17 states have (on average 2.764705882352941) internal successors, (47), 17 states have internal predecessors, (47), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:55:18,486 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2021-12-16 09:55:18,486 INFO L93 Difference]: Finished difference Result 182390 states and 331877 transitions. [2021-12-16 09:55:18,486 INFO L141 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 78 states. [2021-12-16 09:55:18,487 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 182390 states and 331877 transitions. [2021-12-16 09:55:19,098 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 42197 [2021-12-16 09:55:19,575 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 182390 states to 182390 states and 331877 transitions. [2021-12-16 09:55:19,576 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 182390 [2021-12-16 09:55:19,715 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 182390 [2021-12-16 09:55:19,715 INFO L73 IsDeterministic]: Start isDeterministic. Operand 182390 states and 331877 transitions. [2021-12-16 09:55:19,820 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2021-12-16 09:55:19,820 INFO L681 BuchiCegarLoop]: Abstraction has 182390 states and 331877 transitions. [2021-12-16 09:55:19,914 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 182390 states and 331877 transitions. [2021-12-16 09:55:21,689 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 182390 to 136610. [2021-12-16 09:55:21,788 INFO L82 GeneralOperation]: Start removeUnreachable. Operand has 136610 states, 136610 states have (on average 1.8425664299831637) internal successors, (251713), 136609 states have internal predecessors, (251713), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:55:22,021 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136610 states to 136610 states and 251713 transitions. [2021-12-16 09:55:22,022 INFO L704 BuchiCegarLoop]: Abstraction has 136610 states and 251713 transitions. [2021-12-16 09:55:22,022 INFO L587 BuchiCegarLoop]: Abstraction has 136610 states and 251713 transitions. [2021-12-16 09:55:22,022 INFO L425 BuchiCegarLoop]: ======== Iteration 6============ [2021-12-16 09:55:22,022 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136610 states and 251713 transitions. [2021-12-16 09:55:22,571 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 31111 [2021-12-16 09:55:22,571 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2021-12-16 09:55:22,572 INFO L119 BuchiIsEmpty]: Starting construction of run [2021-12-16 09:55:22,575 INFO L842 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:55:22,576 INFO L843 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2021-12-16 09:55:22,576 INFO L791 eck$LassoCheckResult]: Stem: 650772#ULTIMATE.startENTRY assume { :begin_inline_ULTIMATE.init } true;#NULL.base, #NULL.offset := 0, 0;assume 0 == #valid[0];assume 0 < #StackHeapBarrier;call #Ultimate.allocInit(2, 1);call write~init~int(48, 1, 0, 1);call write~init~int(0, 1, 1, 1);call #Ultimate.allocInit(31, 2);call #Ultimate.allocInit(12, 3);call #Ultimate.allocInit(10, 4);call #Ultimate.allocInit(4, 5);call write~init~int(91, 5, 0, 1);call write~init~int(95, 5, 1, 1);call write~init~int(93, 5, 2, 1);call write~init~int(0, 5, 3, 1);call #Ultimate.allocInit(4, 6);call write~init~int(91, 6, 0, 1);call write~init~int(93, 6, 1, 1);call write~init~int(32, 6, 2, 1);call write~init~int(0, 6, 3, 1);call #Ultimate.allocInit(5, 7);call write~init~int(32, 7, 0, 1);call write~init~int(97, 7, 1, 1);call write~init~int(116, 7, 2, 1);call write~init~int(32, 7, 3, 1);call write~init~int(0, 7, 4, 1);call #Ultimate.allocInit(3, 8);call write~init~int(37, 8, 0, 1);call write~init~int(105, 8, 1, 1);call write~init~int(0, 8, 2, 1);call #Ultimate.allocInit(10, 9);call #Ultimate.allocInit(3, 10);call write~init~int(117, 10, 0, 1);call write~init~int(112, 10, 1, 1);call write~init~int(0, 10, 2, 1);call #Ultimate.allocInit(5, 11);call write~init~int(100, 11, 0, 1);call write~init~int(111, 11, 1, 1);call write~init~int(119, 11, 2, 1);call write~init~int(110, 11, 3, 1);call write~init~int(0, 11, 4, 1);call #Ultimate.allocInit(7, 12);call write~init~int(32, 12, 0, 1);call write~init~int(73, 12, 1, 1);call write~init~int(76, 12, 2, 1);call write~init~int(95, 12, 3, 1);call write~init~int(112, 12, 4, 1);call write~init~int(58, 12, 5, 1);call write~init~int(0, 12, 6, 1);call #Ultimate.allocInit(4, 13);call write~init~int(32, 13, 0, 1);call write~init~int(37, 13, 1, 1);call write~init~int(105, 13, 2, 1);call write~init~int(0, 13, 3, 1);call #Ultimate.allocInit(4, 14);call write~init~int(32, 14, 0, 1);call write~init~int(37, 14, 1, 1);call write~init~int(105, 14, 2, 1);call write~init~int(0, 14, 3, 1);call #Ultimate.allocInit(4, 15);call write~init~int(32, 15, 0, 1);call write~init~int(37, 15, 1, 1);call write~init~int(105, 15, 2, 1);call write~init~int(0, 15, 3, 1);call #Ultimate.allocInit(4, 16);call write~init~int(32, 16, 0, 1);call write~init~int(37, 16, 1, 1);call write~init~int(105, 16, 2, 1);call write~init~int(0, 16, 3, 1);call #Ultimate.allocInit(4, 17);call write~init~int(32, 17, 0, 1);call write~init~int(37, 17, 1, 1);call write~init~int(105, 17, 2, 1);call write~init~int(0, 17, 3, 1);call #Ultimate.allocInit(6, 18);call write~init~int(32, 18, 0, 1);call write~init~int(70, 18, 1, 1);call write~init~int(95, 18, 2, 1);call write~init~int(112, 18, 3, 1);call write~init~int(58, 18, 4, 1);call write~init~int(0, 18, 5, 1);call #Ultimate.allocInit(4, 19);call write~init~int(32, 19, 0, 1);call write~init~int(37, 19, 1, 1);call write~init~int(105, 19, 2, 1);call write~init~int(0, 19, 3, 1);call #Ultimate.allocInit(4, 20);call write~init~int(32, 20, 0, 1);call write~init~int(37, 20, 1, 1);call write~init~int(105, 20, 2, 1);call write~init~int(0, 20, 3, 1);call #Ultimate.allocInit(4, 21);call write~init~int(32, 21, 0, 1);call write~init~int(37, 21, 1, 1);call write~init~int(105, 21, 2, 1);call write~init~int(0, 21, 3, 1);call #Ultimate.allocInit(4, 22);call write~init~int(32, 22, 0, 1);call write~init~int(37, 22, 1, 1);call write~init~int(105, 22, 2, 1);call write~init~int(0, 22, 3, 1);call #Ultimate.allocInit(4, 23);call write~init~int(32, 23, 0, 1);call write~init~int(37, 23, 1, 1);call write~init~int(105, 23, 2, 1);call write~init~int(0, 23, 3, 1);call #Ultimate.allocInit(2, 24);call write~init~int(10, 24, 0, 1);call write~init~int(0, 24, 1, 1);call #Ultimate.allocInit(30, 25);call #Ultimate.allocInit(9, 26);call #Ultimate.allocInit(21, 27);call #Ultimate.allocInit(30, 28);call #Ultimate.allocInit(9, 29);call #Ultimate.allocInit(21, 30);call #Ultimate.allocInit(30, 31);call #Ultimate.allocInit(9, 32);call #Ultimate.allocInit(25, 33);call #Ultimate.allocInit(30, 34);call #Ultimate.allocInit(9, 35);call #Ultimate.allocInit(25, 36);~weight~0 := 0;~maximumWeight~0 := 100;~executiveFloor~0 := 4;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 649239#L-1 assume { :end_inline_ULTIMATE.init } true;assume { :begin_inline_main } true;havoc main_#res#1;havoc main_#t~ret117#1, main_~retValue_acc~21#1, main_~tmp~25#1;havoc main_~retValue_acc~21#1;havoc main_~tmp~25#1;assume { :begin_inline_select_helpers } true; 649221#L3065 assume { :end_inline_select_helpers } true;assume { :begin_inline_select_features } true; 649222#L3058 assume { :end_inline_select_features } true;assume { :begin_inline_valid_product } true;havoc valid_product_#res#1;havoc valid_product_~retValue_acc~26#1;havoc valid_product_~retValue_acc~26#1;valid_product_~retValue_acc~26#1 := 1;valid_product_#res#1 := valid_product_~retValue_acc~26#1; 645873#L3073 main_#t~ret117#1 := valid_product_#res#1;assume { :end_inline_valid_product } true;main_~tmp~25#1 := main_#t~ret117#1;havoc main_#t~ret117#1; 645874#L2368 assume 0 != main_~tmp~25#1;assume { :begin_inline_setup } true; 649596#L2342 assume { :end_inline_setup } true;assume { :begin_inline_runTest } true;assume { :begin_inline_test } true;assume { :begin_inline_initTopDown } true;~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;assume { :begin_inline_initFloors } true;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 650830#L2457 assume { :end_inline_initFloors } true; 648742#L109 assume { :end_inline_initTopDown } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 648743#L1751 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 644406#L1776 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 647424#L2735 assume 0 == initPersonOnFloor_~floor#1; 650571#L2736 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 644907#L2843-1 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 645227#L2527 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 644600#L2539-2 assume { :end_inline_callOnFloor } true; 645998#L2879 assume { :end_inline_initPersonOnFloor } true; 645999#L2092 assume { :end_inline_bobCall } true;assume { :begin_inline_threeTS } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 649704#L313 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 649705#L365 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 649466#L1850 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 648611#L1912 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 648612#L330-5 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 645367#L351-5 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 646240#L1916 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 646241#L1956 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 666086#L2464 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 666087#L2491 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 667300#L1600 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 667288#L982 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 667282#L313-1 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 667277#L986 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 667275#L999 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 667273#L1137 assume !(0 != timeShift_~tmp___9~2#1); 667272#L1228 assume !(1 == ~doorState~0); 667271#L1228-2 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 666620#L2464-3 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 666590#L2491-3 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 666581#L1600-1 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 666471#L865 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 666433#L313-2 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 666430#L878 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 666427#L1236 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 666425#L922 assume !(1 == ~currentHeading~0); 666423#L932 assume !(0 == ~currentFloorID~0); 666421#L932-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 666418#L938-1 assume { :end_inline_continueInDirection } true; 666287#L1245-2 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 665585#L1981 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 665323#L365-1 __utac_acc__Specification3_spec__2_#t~ret102#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11#1 := __utac_acc__Specification3_spec__2_#t~ret102#1;havoc __utac_acc__Specification3_spec__2_#t~ret102#1; 665563#L1985 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11#1); 665306#L1993 assume !(1 == ~expectedDirection~0); 665302#L1994 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 665300#L1260 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 665298#L313-4 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 665296#L365-3 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 665293#L1850-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 665291#L1912-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0); 647864#L1922-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 1); 644462#L1933-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 2); 644463#L1944-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 3); 645987#L1955-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 4); 772460#L1956-1 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 772459#L2464-25 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 741842#L2491-25 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 772457#L1600-3 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 772453#L982-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~9#1);assume { :begin_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;havoc stopRequestedAtCurrentFloor__wrappee__empty_#res#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret28#1, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret29#1, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~8#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~currentFloorID~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 772441#L2464-27 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 772437#L2491-27 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret28#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret28#1;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret28#1; 772431#L955-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~3#1;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11#1 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res#1 := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~11#1; 647915#L967-3 stopRequestedAtCurrentFloor_#t~ret33#1 := stopRequestedAtCurrentFloor__wrappee__empty_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor__wrappee__empty } true;stopRequestedAtCurrentFloor_~retValue_acc~12#1 := stopRequestedAtCurrentFloor_#t~ret33#1;havoc stopRequestedAtCurrentFloor_#t~ret33#1;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 645627#L999-1 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 647457#L1137-2 assume !(0 != timeShift_~tmp___9~2#1); 647459#L1228-3 assume 1 == ~doorState~0;~doorState~0 := 0; 647418#L1228-5 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 647419#L2464-28 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 650482#L2491-28 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 648377#L1600-4 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 648378#L865-2 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 775269#L313-6 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 773839#L878-2 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 754729#L1236-2 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 751877#L922-3 assume !(1 == ~currentHeading~0); 654986#L932-9 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 648494#L932-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 654106#L938-7 assume { :end_inline_continueInDirection } true; 652569#L1245-5 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 652564#L1981-1 assume !(-1 == ~expectedDirection~0); 652412#L1993-1 assume !(1 == ~expectedDirection~0); 652386#L1994-1 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 651420#L1260-1 assume { :end_inline_timeShift } true;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 651418#L313-8 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 651415#L365-6 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 651413#L1850-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 651411#L1851-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 651398#L330-24 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 651357#L351-24 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 651342#L1855-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 651328#L1956-2 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 651326#L2464-50 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 651246#L2491-50 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 651323#L1600-6 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 651320#L982-2 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 651317#L313-9 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 651315#L986-2 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 651303#L999-2 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 651296#L1137-4 assume !(0 != timeShift_~tmp___9~2#1); 651298#L1228-6 assume !(1 == ~doorState~0); 651292#L1228-8 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 651293#L2464-53 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 652536#L2491-53 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 652531#L1600-7 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 651187#L865-4 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 651189#L313-10 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 698019#L878-4 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 698017#L1236-4 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 694719#L922-6 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; 694716#L3038-11 continueInDirection_#t~ret27#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1; 694713#L926-18 assume !(0 != continueInDirection_~tmp~7#1); 694712#L932-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 694695#L938-13 assume { :end_inline_continueInDirection } true; 694693#L1245-8 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 694691#L1981-2 assume !(-1 == ~expectedDirection~0); 694690#L1993-2 assume !(1 == ~expectedDirection~0); 694684#L1994-2 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 694683#L1260-2 assume { :end_inline_timeShift } true; 694682#L2159 assume { :end_inline_threeTS } true;assume { :begin_inline_bobCall } true;havoc bobCall_#t~ret105#1, bobCall_~tmp~17#1;havoc bobCall_~tmp~17#1;assume { :begin_inline_getOrigin } true;getOrigin_#in~person#1 := 0;havoc getOrigin_#res#1;havoc getOrigin_~person#1, getOrigin_~retValue_acc~18#1;getOrigin_~person#1 := getOrigin_#in~person#1;havoc getOrigin_~retValue_acc~18#1; 694676#L1751-1 assume 0 == getOrigin_~person#1;getOrigin_~retValue_acc~18#1 := 4;getOrigin_#res#1 := getOrigin_~retValue_acc~18#1; 694675#L1776-1 bobCall_#t~ret105#1 := getOrigin_#res#1;assume { :end_inline_getOrigin } true;bobCall_~tmp~17#1 := bobCall_#t~ret105#1;havoc bobCall_#t~ret105#1;assume { :begin_inline_initPersonOnFloor } true;initPersonOnFloor_#in~person#1, initPersonOnFloor_#in~floor#1 := 0, bobCall_~tmp~17#1;havoc initPersonOnFloor_~person#1, initPersonOnFloor_~floor#1;initPersonOnFloor_~person#1 := initPersonOnFloor_#in~person#1;initPersonOnFloor_~floor#1 := initPersonOnFloor_#in~floor#1; 694673#L2735-1 assume 0 == initPersonOnFloor_~floor#1; 694649#L2736-2 assume 0 == initPersonOnFloor_~person#1;~personOnFloor_0_0~0 := 1; 694630#L2843-3 assume { :begin_inline_callOnFloor } true;callOnFloor_#in~floorID#1 := initPersonOnFloor_~floor#1;havoc callOnFloor_~floorID#1;callOnFloor_~floorID#1 := callOnFloor_#in~floorID#1; 694624#L2527-2 assume 0 == callOnFloor_~floorID#1;~calls_0~0 := 1; 694620#L2539-5 assume { :end_inline_callOnFloor } true; 664139#L2879-1 assume { :end_inline_initPersonOnFloor } true; 658552#L2092-1 assume { :end_inline_bobCall } true;assume { :begin_inline_cleanup } true;havoc cleanup_#t~ret111#1, cleanup_#t~ret112#1, cleanup_~i~3#1, cleanup_~tmp~23#1, cleanup_~tmp___0~12#1, cleanup_~__cil_tmp4~0#1;havoc cleanup_~i~3#1;havoc cleanup_~tmp~23#1;havoc cleanup_~tmp___0~12#1;havoc cleanup_~__cil_tmp4~0#1;assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 658551#L313-12 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 658550#L365-9 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 658549#L1850-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1; 658548#L1851-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 < 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 658540#L330-36 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 658541#L351-36 __utac_acc__Specification3_spec__1_#t~ret92#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___4~3#1 := __utac_acc__Specification3_spec__1_#t~ret92#1;havoc __utac_acc__Specification3_spec__1_#t~ret92#1; 658503#L1855-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3#1;~expectedDirection~0 := 1; 658496#L1956-3 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 658458#L2464-75 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 658457#L2491-75 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 658456#L1600-9 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 658454#L982-3 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 658448#L313-13 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 658449#L986-3 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 656191#L999-3 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 656184#L1137-6 assume !(0 != timeShift_~tmp___9~2#1); 656185#L1228-9 assume 1 == ~doorState~0;~doorState~0 := 0; 658699#L1228-11 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 658619#L2464-78 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 658580#L2491-78 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 658572#L1600-10 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 658573#L865-6 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 655261#L313-14 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 655262#L878-6 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 660120#L1236-6 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 660119#L922-9 assume 1 == ~currentHeading~0;assume { :begin_inline_isTopFloor } true;isTopFloor_#in~floorID#1 := ~currentFloorID~0;havoc isTopFloor_#res#1;havoc isTopFloor_~floorID#1, isTopFloor_~retValue_acc~24#1;isTopFloor_~floorID#1 := isTopFloor_#in~floorID#1;havoc isTopFloor_~retValue_acc~24#1;isTopFloor_~retValue_acc~24#1 := (if 4 == isTopFloor_~floorID#1 then 1 else 0);isTopFloor_#res#1 := isTopFloor_~retValue_acc~24#1; 660118#L3038-16 continueInDirection_#t~ret27#1 := isTopFloor_#res#1;assume { :end_inline_isTopFloor } true;continueInDirection_~tmp~7#1 := continueInDirection_#t~ret27#1;havoc continueInDirection_#t~ret27#1; 660114#L926-27 assume 0 != continueInDirection_~tmp~7#1;~currentHeading~0 := 0; 660115#L932-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 680594#L938-19 assume { :end_inline_continueInDirection } true; 680592#L1245-11 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 675447#L1981-3 assume !(-1 == ~expectedDirection~0); 675445#L1993-3 assume !(1 == ~expectedDirection~0); 675434#L1994-3 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 675433#L1260-3 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 0; 675431#L2174-2 [2021-12-16 09:55:22,577 INFO L793 eck$LassoCheckResult]: Loop: 675431#L2174-2 assume !false; 675426#L2175 cleanup_~__cil_tmp4~0#1 := ~cleanupTimeShifts~0 - 1; 675424#L2178 assume cleanup_~i~3#1 < cleanup_~__cil_tmp4~0#1;assume { :begin_inline_isBlocked } true;havoc isBlocked_#res#1;havoc isBlocked_~retValue_acc~0#1;havoc isBlocked_~retValue_acc~0#1;isBlocked_~retValue_acc~0#1 := 0;isBlocked_#res#1 := isBlocked_~retValue_acc~0#1; 675423#L140 cleanup_#t~ret111#1 := isBlocked_#res#1;assume { :end_inline_isBlocked } true;cleanup_~tmp___0~12#1 := cleanup_#t~ret111#1;havoc cleanup_#t~ret111#1; 675422#L2182 assume 1 != cleanup_~tmp___0~12#1; 675421#L2182-1 assume { :begin_inline_isIdle } true;havoc isIdle_#res#1;havoc isIdle_#t~ret12#1, isIdle_~retValue_acc~7#1, isIdle_~tmp~4#1;havoc isIdle_~retValue_acc~7#1;havoc isIdle_~tmp~4#1;assume { :begin_inline_anyStopRequested } true;havoc anyStopRequested_#res#1;havoc anyStopRequested_#t~ret7#1, anyStopRequested_#t~ret8#1, anyStopRequested_#t~ret9#1, anyStopRequested_#t~ret10#1, anyStopRequested_#t~ret11#1, anyStopRequested_~retValue_acc~6#1, anyStopRequested_~tmp~3#1, anyStopRequested_~tmp___0~0#1, anyStopRequested_~tmp___1~0#1, anyStopRequested_~tmp___2~0#1, anyStopRequested_~tmp___3~0#1;havoc anyStopRequested_~retValue_acc~6#1;havoc anyStopRequested_~tmp~3#1;havoc anyStopRequested_~tmp___0~0#1;havoc anyStopRequested_~tmp___1~0#1;havoc anyStopRequested_~tmp___2~0#1;havoc anyStopRequested_~tmp___3~0#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := 0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 675420#L2464-100 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 675419#L2491-100 anyStopRequested_#t~ret7#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;anyStopRequested_~tmp___3~0#1 := anyStopRequested_#t~ret7#1;havoc anyStopRequested_#t~ret7#1; 675374#L421 assume 0 != anyStopRequested_~tmp___3~0#1;anyStopRequested_~retValue_acc~6#1 := 1;anyStopRequested_#res#1 := anyStopRequested_~retValue_acc~6#1; 675364#L485 isIdle_#t~ret12#1 := anyStopRequested_#res#1;assume { :end_inline_anyStopRequested } true;isIdle_~tmp~4#1 := isIdle_#t~ret12#1;havoc isIdle_#t~ret12#1;isIdle_~retValue_acc~7#1 := (if 0 == isIdle_~tmp~4#1 then 1 else 0);isIdle_#res#1 := isIdle_~retValue_acc~7#1; 675362#L498 cleanup_#t~ret112#1 := isIdle_#res#1;assume { :end_inline_isIdle } true;cleanup_~tmp~23#1 := cleanup_#t~ret112#1;havoc cleanup_#t~ret112#1; 675360#L2194 assume !(0 != cleanup_~tmp~23#1);assume { :begin_inline_timeShift } true;havoc timeShift_#t~ret46#1, timeShift_#t~ret47#1, timeShift_#t~ret48#1, timeShift_#t~ret49#1, timeShift_#t~ret50#1, timeShift_#t~ret51#1, timeShift_#t~ret52#1, timeShift_#t~ret53#1, timeShift_#t~ret54#1, timeShift_#t~ret55#1, timeShift_#t~ret56#1, timeShift_~tmp~11#1, timeShift_~tmp___0~6#1, timeShift_~tmp___1~3#1, timeShift_~tmp___2~3#1, timeShift_~tmp___3~3#1, timeShift_~tmp___4~2#1, timeShift_~tmp___5~2#1, timeShift_~tmp___6~2#1, timeShift_~tmp___7~2#1, timeShift_~tmp___8~2#1, timeShift_~tmp___9~2#1;havoc timeShift_~tmp~11#1;havoc timeShift_~tmp___0~6#1;havoc timeShift_~tmp___1~3#1;havoc timeShift_~tmp___2~3#1;havoc timeShift_~tmp___3~3#1;havoc timeShift_~tmp___4~2#1;havoc timeShift_~tmp___5~2#1;havoc timeShift_~tmp___6~2#1;havoc timeShift_~tmp___7~2#1;havoc timeShift_~tmp___8~2#1;havoc timeShift_~tmp___9~2#1;assume { :begin_inline___utac_acc__Specification3_spec__1 } true;havoc __utac_acc__Specification3_spec__1_#t~ret90#1, __utac_acc__Specification3_spec__1_#t~ret91#1, __utac_acc__Specification3_spec__1_#t~ret92#1, __utac_acc__Specification3_spec__1_#t~ret93#1, __utac_acc__Specification3_spec__1_#t~ret94#1, __utac_acc__Specification3_spec__1_#t~ret95#1, __utac_acc__Specification3_spec__1_#t~ret96#1, __utac_acc__Specification3_spec__1_#t~ret97#1, __utac_acc__Specification3_spec__1_#t~ret98#1, __utac_acc__Specification3_spec__1_#t~ret99#1, __utac_acc__Specification3_spec__1_#t~ret100#1, __utac_acc__Specification3_spec__1_#t~ret101#1, __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1, __utac_acc__Specification3_spec__1_~tmp~15#1, __utac_acc__Specification3_spec__1_~tmp___0~10#1, __utac_acc__Specification3_spec__1_~tmp___1~7#1, __utac_acc__Specification3_spec__1_~tmp___2~5#1, __utac_acc__Specification3_spec__1_~tmp___3~5#1, __utac_acc__Specification3_spec__1_~tmp___4~3#1, __utac_acc__Specification3_spec__1_~tmp___5~3#1, __utac_acc__Specification3_spec__1_~tmp___6~3#1, __utac_acc__Specification3_spec__1_~tmp___7~3#1, __utac_acc__Specification3_spec__1_~tmp___8~3#1, __utac_acc__Specification3_spec__1_~tmp___9~3#1, __utac_acc__Specification3_spec__1_~tmp___10~1#1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1;havoc __utac_acc__Specification3_spec__1_~tmp~15#1;havoc __utac_acc__Specification3_spec__1_~tmp___0~10#1;havoc __utac_acc__Specification3_spec__1_~tmp___1~7#1;havoc __utac_acc__Specification3_spec__1_~tmp___2~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___3~5#1;havoc __utac_acc__Specification3_spec__1_~tmp___4~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___5~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___6~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___7~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___8~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___9~3#1;havoc __utac_acc__Specification3_spec__1_~tmp___10~1#1;~expectedDirection~0 := 0;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 675358#L313-16 __utac_acc__Specification3_spec__1_#t~ret90#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;__utac_acc__Specification3_spec__1_~tmp~15#1 := __utac_acc__Specification3_spec__1_#t~ret90#1;havoc __utac_acc__Specification3_spec__1_#t~ret90#1;__utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 := __utac_acc__Specification3_spec__1_~tmp~15#1;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 675356#L365-12 __utac_acc__Specification3_spec__1_#t~ret91#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__1_~tmp___10~1#1 := __utac_acc__Specification3_spec__1_#t~ret91#1;havoc __utac_acc__Specification3_spec__1_#t~ret91#1; 675353#L1850-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1#1); 675351#L1912-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0#1 > 0;assume { :begin_inline_buttonForFloorIsPressed } true;buttonForFloorIsPressed_#in~floorID#1 := 0;havoc buttonForFloorIsPressed_#res#1;havoc buttonForFloorIsPressed_~floorID#1, buttonForFloorIsPressed_~retValue_acc~3#1;buttonForFloorIsPressed_~floorID#1 := buttonForFloorIsPressed_#in~floorID#1;havoc buttonForFloorIsPressed_~retValue_acc~3#1; 675350#L330-53 assume 0 == buttonForFloorIsPressed_~floorID#1;buttonForFloorIsPressed_~retValue_acc~3#1 := ~floorButtons_0~0;buttonForFloorIsPressed_#res#1 := buttonForFloorIsPressed_~retValue_acc~3#1; 675341#L351-53 __utac_acc__Specification3_spec__1_#t~ret97#1 := buttonForFloorIsPressed_#res#1;assume { :end_inline_buttonForFloorIsPressed } true;__utac_acc__Specification3_spec__1_~tmp___9~3#1 := __utac_acc__Specification3_spec__1_#t~ret97#1;havoc __utac_acc__Specification3_spec__1_#t~ret97#1; 668200#L1916-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3#1;~expectedDirection~0 := -1; 668196#L1956-4 assume { :end_inline___utac_acc__Specification3_spec__1 } true;assume { :begin_inline_stopRequestedAtCurrentFloor } true;havoc stopRequestedAtCurrentFloor_#res#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1, stopRequestedAtCurrentFloor_#t~ret31#1, stopRequestedAtCurrentFloor_#t~ret32#1, stopRequestedAtCurrentFloor_#t~ret33#1, stopRequestedAtCurrentFloor_~retValue_acc~12#1, stopRequestedAtCurrentFloor_~tmp~9#1, stopRequestedAtCurrentFloor_~tmp___0~4#1;havoc stopRequestedAtCurrentFloor_~retValue_acc~12#1;havoc stopRequestedAtCurrentFloor_~tmp~9#1;havoc stopRequestedAtCurrentFloor_~tmp___0~4#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 668174#L2464-105 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 668167#L2491-105 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 668168#L1600-12 stopRequestedAtCurrentFloor_#t~ret30#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedAtCurrentFloor_~tmp~9#1 := stopRequestedAtCurrentFloor_#t~ret30#1;havoc stopRequestedAtCurrentFloor_#t~ret30#1; 668561#L982-4 assume 0 != stopRequestedAtCurrentFloor_~tmp~9#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 668560#L313-17 stopRequestedAtCurrentFloor_#t~ret31#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedAtCurrentFloor_~tmp___0~4#1 := stopRequestedAtCurrentFloor_#t~ret31#1;havoc stopRequestedAtCurrentFloor_#t~ret31#1; 668558#L986-4 assume !(~executiveFloor~0 == stopRequestedAtCurrentFloor_~tmp___0~4#1);stopRequestedAtCurrentFloor_~retValue_acc~12#1 := 0;stopRequestedAtCurrentFloor_#res#1 := stopRequestedAtCurrentFloor_~retValue_acc~12#1; 668559#L999-4 timeShift_#t~ret46#1 := stopRequestedAtCurrentFloor_#res#1;assume { :end_inline_stopRequestedAtCurrentFloor } true;timeShift_~tmp___9~2#1 := timeShift_#t~ret46#1;havoc timeShift_#t~ret46#1; 679124#L1137-8 assume !(0 != timeShift_~tmp___9~2#1); 679125#L1228-12 assume 1 == ~doorState~0;~doorState~0 := 0; 699123#L1228-14 assume { :begin_inline_stopRequestedInDirection } true;stopRequestedInDirection_#in~dir#1, stopRequestedInDirection_#in~respectFloorCalls#1, stopRequestedInDirection_#in~respectInLiftCalls#1 := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res#1;havoc stopRequestedInDirection_#t~ret24#1, stopRequestedInDirection_#t~ret25#1, stopRequestedInDirection_#t~ret26#1, stopRequestedInDirection_~dir#1, stopRequestedInDirection_~respectFloorCalls#1, stopRequestedInDirection_~respectInLiftCalls#1, stopRequestedInDirection_~retValue_acc~9#1, stopRequestedInDirection_~tmp~6#1, stopRequestedInDirection_~tmp___0~2#1, stopRequestedInDirection_~__cil_tmp7~0#1, stopRequestedInDirection_~__cil_tmp8~0#1;stopRequestedInDirection_~dir#1 := stopRequestedInDirection_#in~dir#1;stopRequestedInDirection_~respectFloorCalls#1 := stopRequestedInDirection_#in~respectFloorCalls#1;stopRequestedInDirection_~respectInLiftCalls#1 := stopRequestedInDirection_#in~respectInLiftCalls#1;havoc stopRequestedInDirection_~retValue_acc~9#1;havoc stopRequestedInDirection_~tmp~6#1;havoc stopRequestedInDirection_~tmp___0~2#1;havoc stopRequestedInDirection_~__cil_tmp7~0#1;havoc stopRequestedInDirection_~__cil_tmp8~0#1;assume { :begin_inline_isExecutiveFloorCalling } true;havoc isExecutiveFloorCalling_#res#1;havoc isExecutiveFloorCalling_#t~ret83#1, isExecutiveFloorCalling_~retValue_acc~15#1;havoc isExecutiveFloorCalling_~retValue_acc~15#1;assume { :begin_inline_isFloorCalling } true;isFloorCalling_#in~floorID#1 := ~executiveFloor~0;havoc isFloorCalling_#res#1;havoc isFloorCalling_~floorID#1, isFloorCalling_~retValue_acc~22#1;isFloorCalling_~floorID#1 := isFloorCalling_#in~floorID#1;havoc isFloorCalling_~retValue_acc~22#1; 698044#L2464-108 assume 0 == isFloorCalling_~floorID#1;isFloorCalling_~retValue_acc~22#1 := ~calls_0~0;isFloorCalling_#res#1 := isFloorCalling_~retValue_acc~22#1; 698041#L2491-108 isExecutiveFloorCalling_#t~ret83#1 := isFloorCalling_#res#1;assume { :end_inline_isFloorCalling } true;isExecutiveFloorCalling_~retValue_acc~15#1 := isExecutiveFloorCalling_#t~ret83#1;havoc isExecutiveFloorCalling_#t~ret83#1;isExecutiveFloorCalling_#res#1 := isExecutiveFloorCalling_~retValue_acc~15#1; 698039#L1600-13 stopRequestedInDirection_#t~ret24#1 := isExecutiveFloorCalling_#res#1;assume { :end_inline_isExecutiveFloorCalling } true;stopRequestedInDirection_~tmp___0~2#1 := stopRequestedInDirection_#t~ret24#1;havoc stopRequestedInDirection_#t~ret24#1; 698038#L865-8 assume 0 != stopRequestedInDirection_~tmp___0~2#1;assume { :begin_inline_getCurrentFloorID } true;havoc getCurrentFloorID_#res#1;havoc getCurrentFloorID_~retValue_acc~1#1;havoc getCurrentFloorID_~retValue_acc~1#1;getCurrentFloorID_~retValue_acc~1#1 := ~currentFloorID~0;getCurrentFloorID_#res#1 := getCurrentFloorID_~retValue_acc~1#1; 697971#L313-18 stopRequestedInDirection_#t~ret25#1 := getCurrentFloorID_#res#1;assume { :end_inline_getCurrentFloorID } true;stopRequestedInDirection_~tmp~6#1 := stopRequestedInDirection_#t~ret25#1;havoc stopRequestedInDirection_#t~ret25#1;stopRequestedInDirection_~__cil_tmp7~0#1 := (if 1 == stopRequestedInDirection_~dir#1 then 1 else 0);stopRequestedInDirection_~__cil_tmp8~0#1 := (if stopRequestedInDirection_~tmp~6#1 < ~executiveFloor~0 then 1 else 0);stopRequestedInDirection_~retValue_acc~9#1 := (if stopRequestedInDirection_~__cil_tmp8~0#1 == stopRequestedInDirection_~__cil_tmp7~0#1 then 1 else 0);stopRequestedInDirection_#res#1 := stopRequestedInDirection_~retValue_acc~9#1; 697968#L878-8 timeShift_#t~ret53#1 := stopRequestedInDirection_#res#1;assume { :end_inline_stopRequestedInDirection } true;timeShift_~tmp___8~2#1 := timeShift_#t~ret53#1;havoc timeShift_#t~ret53#1; 697964#L1236-8 assume 0 != timeShift_~tmp___8~2#1;assume { :begin_inline_continueInDirection } true;continueInDirection_#in~dir#1 := ~currentHeading~0;havoc continueInDirection_#t~ret27#1, continueInDirection_~dir#1, continueInDirection_~tmp~7#1;continueInDirection_~dir#1 := continueInDirection_#in~dir#1;havoc continueInDirection_~tmp~7#1;~currentHeading~0 := continueInDirection_~dir#1; 697962#L922-12 assume !(1 == ~currentHeading~0); 697959#L932-36 assume !(0 == ~currentFloorID~0); 697956#L932-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 694579#L938-25 assume { :end_inline_continueInDirection } true; 694576#L1245-14 assume { :begin_inline___utac_acc__Specification3_spec__2 } true;havoc __utac_acc__Specification3_spec__2_#t~ret102#1, __utac_acc__Specification3_spec__2_#t~ret103#1, __utac_acc__Specification3_spec__2_~tmp~16#1, __utac_acc__Specification3_spec__2_~tmp___0~11#1;havoc __utac_acc__Specification3_spec__2_~tmp~16#1;havoc __utac_acc__Specification3_spec__2_~tmp___0~11#1; 694575#L1981-4 assume -1 == ~expectedDirection~0;assume { :begin_inline_getCurrentHeading } true;havoc getCurrentHeading_#res#1;havoc getCurrentHeading_~retValue_acc~4#1;havoc getCurrentHeading_~retValue_acc~4#1;getCurrentHeading_~retValue_acc~4#1 := ~currentHeading~0;getCurrentHeading_#res#1 := getCurrentHeading_~retValue_acc~4#1; 675444#L365-13 __utac_acc__Specification3_spec__2_#t~ret102#1 := getCurrentHeading_#res#1;assume { :end_inline_getCurrentHeading } true;__utac_acc__Specification3_spec__2_~tmp___0~11#1 := __utac_acc__Specification3_spec__2_#t~ret102#1;havoc __utac_acc__Specification3_spec__2_#t~ret102#1; 687295#L1985-8 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~11#1); 675438#L1993-4 assume !(1 == ~expectedDirection~0); 675435#L1994-4 assume { :end_inline___utac_acc__Specification3_spec__2 } true; 675432#L1260-4 assume { :end_inline_timeShift } true;cleanup_~i~3#1 := 1 + cleanup_~i~3#1; 675431#L2174-2 [2021-12-16 09:55:22,577 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:55:22,577 INFO L85 PathProgramCache]: Analyzing trace with hash -1716327036, now seen corresponding path program 1 times [2021-12-16 09:55:22,578 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:55:22,578 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [869248339] [2021-12-16 09:55:22,578 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:55:22,578 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:55:22,594 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:55:22,618 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:55:22,619 INFO L139 FreeRefinementEngine]: Strategy CAMEL found an infeasible trace [2021-12-16 09:55:22,619 INFO L333 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [869248339] [2021-12-16 09:55:22,619 INFO L160 FreeRefinementEngine]: IpTcStrategyModuleSmtInterpolCraig [869248339] provided 1 perfect and 0 imperfect interpolant sequences [2021-12-16 09:55:22,619 INFO L186 FreeRefinementEngine]: Found 1 perfect and 0 imperfect interpolant sequences. [2021-12-16 09:55:22,619 INFO L199 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2021-12-16 09:55:22,619 INFO L115 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [741347681] [2021-12-16 09:55:22,620 INFO L85 oduleStraightlineAll]: Using 1 perfect interpolants to construct interpolant automaton [2021-12-16 09:55:22,620 INFO L796 eck$LassoCheckResult]: stem already infeasible [2021-12-16 09:55:22,622 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:55:22,623 INFO L85 PathProgramCache]: Analyzing trace with hash 796766049, now seen corresponding path program 1 times [2021-12-16 09:55:22,623 INFO L121 FreeRefinementEngine]: Executing refinement strategy CAMEL [2021-12-16 09:55:22,623 INFO L333 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1546009534] [2021-12-16 09:55:22,624 INFO L95 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2021-12-16 09:55:22,624 INFO L126 SolverBuilder]: Constructing new instance of SMTInterpol with explicit timeout -1 ms and remaining time -1 ms [2021-12-16 09:55:22,632 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-16 09:55:22,632 INFO L352 TraceCheck]: Trace is feasible, we will do another trace check, this time with branch encoders. [2021-12-16 09:55:22,637 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2021-12-16 09:55:22,655 INFO L133 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2021-12-16 09:55:23,737 INFO L210 LassoAnalysis]: Preferences: [2021-12-16 09:55:23,737 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-16 09:55:23,737 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-16 09:55:23,737 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-16 09:55:23,738 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2021-12-16 09:55:23,738 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:23,738 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-16 09:55:23,738 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-16 09:55:23,738 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27.cil.c_Iteration6_Loop [2021-12-16 09:55:23,738 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-16 09:55:23,738 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-16 09:55:23,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,769 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,782 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,817 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,818 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,825 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,828 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,832 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,834 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,835 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,837 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,839 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,840 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,842 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,843 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,845 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,868 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,878 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,888 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,899 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,903 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,907 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,919 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,931 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,937 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,938 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:23,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:24,614 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-16 09:55:24,615 INFO L404 LassoAnalysis]: Checking for nontermination... [2021-12-16 09:55:24,616 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,616 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,617 INFO L229 MonitoredProcess]: Starting monitored process 2 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,618 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Waiting until timeout for monitored process [2021-12-16 09:55:24,621 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,622 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,632 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,632 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,649 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (2)] Ended with exit code 0 [2021-12-16 09:55:24,649 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,649 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,650 INFO L229 MonitoredProcess]: Starting monitored process 3 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,653 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Waiting until timeout for monitored process [2021-12-16 09:55:24,655 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,655 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,676 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,676 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret112#1=0} Honda state: {ULTIMATE.start_cleanup_#t~ret112#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,694 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (3)] Ended with exit code 0 [2021-12-16 09:55:24,694 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,694 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,695 INFO L229 MonitoredProcess]: Starting monitored process 4 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,699 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Waiting until timeout for monitored process [2021-12-16 09:55:24,700 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,700 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,721 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,721 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret53#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,738 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (4)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,738 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,738 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,743 INFO L229 MonitoredProcess]: Starting monitored process 5 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,752 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Waiting until timeout for monitored process [2021-12-16 09:55:24,752 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,752 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,772 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,772 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3#1=4, ULTIMATE.start_buttonForFloorIsPressed_#res#1=4, ~floorButtons_0~0=4, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3#1=4} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3#1=4, ULTIMATE.start_buttonForFloorIsPressed_#res#1=4, ~floorButtons_0~0=4, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~3#1=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,788 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (5)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,789 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,789 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,789 INFO L229 MonitoredProcess]: Starting monitored process 6 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,790 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Waiting until timeout for monitored process [2021-12-16 09:55:24,791 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,791 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,811 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,812 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret27#1=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret27#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,828 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (6)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,828 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,828 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,829 INFO L229 MonitoredProcess]: Starting monitored process 7 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,830 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Waiting until timeout for monitored process [2021-12-16 09:55:24,831 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,831 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,841 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,842 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,859 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (7)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,859 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,860 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,860 INFO L229 MonitoredProcess]: Starting monitored process 8 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,861 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Waiting until timeout for monitored process [2021-12-16 09:55:24,862 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,862 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,871 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,871 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~3#1=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,888 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (8)] Ended with exit code 0 [2021-12-16 09:55:24,888 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,888 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,889 INFO L229 MonitoredProcess]: Starting monitored process 9 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,889 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Waiting until timeout for monitored process [2021-12-16 09:55:24,891 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,891 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,897 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,897 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret49#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret49#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,911 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (9)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,912 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,912 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,913 INFO L229 MonitoredProcess]: Starting monitored process 10 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,917 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Waiting until timeout for monitored process [2021-12-16 09:55:24,920 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,920 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,942 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,942 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:24,959 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (10)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:24,960 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:24,960 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:24,960 INFO L229 MonitoredProcess]: Starting monitored process 11 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:24,961 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Waiting until timeout for monitored process [2021-12-16 09:55:24,962 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:24,963 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:24,983 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:24,984 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0, ULTIMATE.start_buttonForFloorIsPressed_~floorID#1=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#in~floorID#1=0, ULTIMATE.start_buttonForFloorIsPressed_~floorID#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,001 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (11)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,002 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,002 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,003 INFO L229 MonitoredProcess]: Starting monitored process 12 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,011 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Waiting until timeout for monitored process [2021-12-16 09:55:25,014 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,014 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,031 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:25,031 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret54#1=0} Honda state: {ULTIMATE.start_timeShift_#t~ret54#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,045 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (12)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,046 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,046 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,047 INFO L229 MonitoredProcess]: Starting monitored process 13 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,047 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Waiting until timeout for monitored process [2021-12-16 09:55:25,050 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,050 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,057 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:25,057 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret33#1=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret33#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,072 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (13)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,072 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,073 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,073 INFO L229 MonitoredProcess]: Starting monitored process 14 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,074 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Waiting until timeout for monitored process [2021-12-16 09:55:25,075 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,075 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,086 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:25,086 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7#1=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~7#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,101 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,101 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,102 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,102 INFO L229 MonitoredProcess]: Starting monitored process 15 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,103 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Waiting until timeout for monitored process [2021-12-16 09:55:25,105 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,105 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,111 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:25,112 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret12#1=0} Honda state: {ULTIMATE.start_isIdle_#t~ret12#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,126 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (15)] Ended with exit code 0 [2021-12-16 09:55:25,127 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,127 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,127 INFO L229 MonitoredProcess]: Starting monitored process 16 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,129 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Waiting until timeout for monitored process [2021-12-16 09:55:25,129 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,129 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,136 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2021-12-16 09:55:25,136 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret7#1=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret7#1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [2021-12-16 09:55:25,151 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (16)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,151 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,151 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,152 INFO L229 MonitoredProcess]: Starting monitored process 17 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,152 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Waiting until timeout for monitored process [2021-12-16 09:55:25,154 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2021-12-16 09:55:25,154 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:25,186 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (17)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:25,187 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:25,187 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:25,188 INFO L229 MonitoredProcess]: Starting monitored process 18 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:25,189 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Waiting until timeout for monitored process [2021-12-16 09:55:25,190 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2021-12-16 09:55:25,190 INFO L160 nArgumentSynthesizer]: Using integer mode. [2021-12-16 09:55:26,087 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2021-12-16 09:55:26,091 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (18)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:26,092 INFO L210 LassoAnalysis]: Preferences: [2021-12-16 09:55:26,092 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2021-12-16 09:55:26,092 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2021-12-16 09:55:26,092 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2021-12-16 09:55:26,092 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2021-12-16 09:55:26,092 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:26,092 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2021-12-16 09:55:26,092 INFO L132 ssoRankerPreferences]: Path of dumped script: [2021-12-16 09:55:26,092 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product27.cil.c_Iteration6_Loop [2021-12-16 09:55:26,092 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2021-12-16 09:55:26,092 INFO L276 LassoAnalysis]: Starting lasso preprocessing... [2021-12-16 09:55:26,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,124 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,152 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,244 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,246 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,248 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,250 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,256 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,261 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,266 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,272 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,300 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,306 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,318 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,335 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,336 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2021-12-16 09:55:26,898 INFO L294 LassoAnalysis]: Preprocessing complete. [2021-12-16 09:55:26,904 INFO L490 LassoAnalysis]: Using template 'affine'. [2021-12-16 09:55:26,905 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:26,905 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:26,906 INFO L229 MonitoredProcess]: Starting monitored process 19 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:26,907 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Waiting until timeout for monitored process [2021-12-16 09:55:26,908 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:26,914 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:26,914 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:26,914 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:26,914 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:26,914 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:26,916 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:26,916 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:26,917 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:26,932 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (19)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:26,932 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:26,932 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:26,933 INFO L229 MonitoredProcess]: Starting monitored process 20 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:26,934 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Waiting until timeout for monitored process [2021-12-16 09:55:26,934 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:26,939 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:26,940 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:26,940 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:26,940 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:26,940 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:26,940 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:26,940 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:26,956 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:26,970 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (20)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:26,971 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:26,971 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:26,971 INFO L229 MonitoredProcess]: Starting monitored process 21 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:26,972 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Waiting until timeout for monitored process [2021-12-16 09:55:26,974 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:26,980 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:26,980 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:26,980 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:26,980 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:26,980 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:26,980 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:26,980 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:26,983 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,001 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (21)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,001 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,001 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,002 INFO L229 MonitoredProcess]: Starting monitored process 22 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,002 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Waiting until timeout for monitored process [2021-12-16 09:55:27,004 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,009 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,009 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,009 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,009 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,009 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,010 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,010 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,025 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,040 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (22)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,040 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,040 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,041 INFO L229 MonitoredProcess]: Starting monitored process 23 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,041 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Waiting until timeout for monitored process [2021-12-16 09:55:27,042 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,048 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,048 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,048 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,048 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2021-12-16 09:55:27,048 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,050 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2021-12-16 09:55:27,050 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,068 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,084 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (23)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,085 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,085 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,086 INFO L229 MonitoredProcess]: Starting monitored process 24 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,087 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Waiting until timeout for monitored process [2021-12-16 09:55:27,088 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,093 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,094 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,094 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,094 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,094 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,094 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,094 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,107 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,124 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (24)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,124 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,125 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,125 INFO L229 MonitoredProcess]: Starting monitored process 25 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,126 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Waiting until timeout for monitored process [2021-12-16 09:55:27,127 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,133 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,133 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,133 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,133 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,133 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,133 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,133 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,134 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,148 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (25)] Ended with exit code 0 [2021-12-16 09:55:27,149 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,149 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,149 INFO L229 MonitoredProcess]: Starting monitored process 26 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,150 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Waiting until timeout for monitored process [2021-12-16 09:55:27,151 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,156 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,156 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,156 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,157 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,157 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,157 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,157 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,158 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,172 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (26)] Ended with exit code 0 [2021-12-16 09:55:27,172 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,172 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,173 INFO L229 MonitoredProcess]: Starting monitored process 27 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,174 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Waiting until timeout for monitored process [2021-12-16 09:55:27,175 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,180 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,180 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,180 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,180 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,180 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,181 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,181 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,182 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,198 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (27)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,199 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,199 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,199 INFO L229 MonitoredProcess]: Starting monitored process 28 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,200 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Waiting until timeout for monitored process [2021-12-16 09:55:27,202 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,207 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,208 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,208 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,208 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,208 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,208 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,209 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,219 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,233 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (28)] Ended with exit code 0 [2021-12-16 09:55:27,234 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,234 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,234 INFO L229 MonitoredProcess]: Starting monitored process 29 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,235 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Waiting until timeout for monitored process [2021-12-16 09:55:27,237 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,242 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,242 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,242 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,242 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,242 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,243 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,243 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,244 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,258 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (29)] Ended with exit code 0 [2021-12-16 09:55:27,258 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,258 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,259 INFO L229 MonitoredProcess]: Starting monitored process 30 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,259 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Waiting until timeout for monitored process [2021-12-16 09:55:27,261 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,266 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,266 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,266 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,266 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,266 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,266 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,266 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,275 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,289 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (30)] Ended with exit code 0 [2021-12-16 09:55:27,290 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,290 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,290 INFO L229 MonitoredProcess]: Starting monitored process 31 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,292 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Waiting until timeout for monitored process [2021-12-16 09:55:27,292 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,297 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,298 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,298 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,298 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,298 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,298 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,298 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,299 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,313 INFO L552 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (31)] Ended with exit code 0 [2021-12-16 09:55:27,313 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,314 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,314 INFO L229 MonitoredProcess]: Starting monitored process 32 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,315 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Waiting until timeout for monitored process [2021-12-16 09:55:27,316 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,321 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,321 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,321 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,321 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,322 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,322 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,322 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,334 INFO L527 LassoAnalysis]: Proving termination failed for this template and these settings. [2021-12-16 09:55:27,350 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (32)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,351 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,351 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,351 INFO L229 MonitoredProcess]: Starting monitored process 33 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,352 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Waiting until timeout for monitored process [2021-12-16 09:55:27,354 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSESNumber of strict supporting invariants: 0Number of non-strict supporting invariants: 1Consider only non-deceasing supporting invariants: trueSimplify termination arguments: trueSimplify supporting invariants: trueOverapproximate stem: false [2021-12-16 09:55:27,360 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2021-12-16 09:55:27,360 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2021-12-16 09:55:27,360 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2021-12-16 09:55:27,361 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2021-12-16 09:55:27,361 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2021-12-16 09:55:27,362 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2021-12-16 09:55:27,363 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2021-12-16 09:55:27,409 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2021-12-16 09:55:27,427 INFO L443 ModelExtractionUtils]: Simplification made 3 calls to the SMT solver. [2021-12-16 09:55:27,427 INFO L444 ModelExtractionUtils]: 6 out of 9 variables were initially zero. Simplification set additionally 1 variables to zero. [2021-12-16 09:55:27,429 INFO L168 SolverBuilder]: Constructing external solver with command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2021-12-16 09:55:27,429 INFO L189 MonitoredProcess]: No working directory specified, using /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 [2021-12-16 09:55:27,429 INFO L229 MonitoredProcess]: Starting monitored process 34 with /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2021-12-16 09:55:27,430 INFO L327 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Waiting until timeout for monitored process [2021-12-16 09:55:27,432 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2021-12-16 09:55:27,432 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2021-12-16 09:55:27,432 INFO L513 LassoAnalysis]: Proved termination. [2021-12-16 09:55:27,432 INFO L515 LassoAnalysis]: Termination argument consisting of: Ranking function f(~currentFloorID~0) = 1*~currentFloorID~0 Supporting invariants [] [2021-12-16 09:55:27,449 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (33)] Forceful destruction successful, exit code 0 [2021-12-16 09:55:27,451 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2021-12-16 09:55:27,463 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2021-12-16 09:55:27,605 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:55:27,610 INFO L263 TraceCheckSpWp]: Trace formula consists of 1166 conjuncts, 2 conjunts are in the unsatisfiable core [2021-12-16 09:55:27,620 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 09:55:27,874 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2021-12-16 09:55:27,875 INFO L263 TraceCheckSpWp]: Trace formula consists of 181 conjuncts, 8 conjunts are in the unsatisfiable core [2021-12-16 09:55:27,879 INFO L286 TraceCheckSpWp]: Computing forward predicates... [2021-12-16 09:55:28,105 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2021-12-16 09:55:28,109 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 5 loop predicates [2021-12-16 09:55:28,110 INFO L71 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 136610 states and 251713 transitions. cyclomatic complexity: 115108 Second operand has 7 states, 7 states have (on average 31.285714285714285) internal successors, (219), 7 states have internal predecessors, (219), 0 states have call successors, (0), 0 states have call predecessors, (0), 0 states have return successors, (0), 0 states have call predecessors, (0), 0 states have call successors, (0) [2021-12-16 09:55:28,429 INFO L540 MonitoredProcess]: [MP /storage/repos/ultimate/releaseScripts/default/UAutomizer-linux/z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (34)] Forceful destruction successful, exit code 0